DNSSEC architecture at SURFnet

Written by Rick van Rein in category: Architecture

Our signing architecture constitutes of redundant signers, connecting redundantly to redundant HSMs. Without redundancy, a situation could occur where domains disappear from the internet due to signatures that are not updated in time.

No Comments