Hello! I use BIND 9 .

Suppose I have a test.ru zone signed by DNSSEC , it works correctly, everything is ok. I create another zone hello.test.ru (That is, formally, I am the registrar of this zone) and sign it as well as the first one.

Now, as I once gave the DS key to the ru registrar, I have to give the DS key somewhere to myself, no matter how stupid it may sound, but I do not know where.

Question: What is the config to enter this key?

PS: the question is inspired by this

All my sub-domains have recently been labeled as untrusted/insecure

    0