<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>9. Security</title><link rel="stylesheet" href="docbook.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.75.2" /><link rel="home" href="index.html" title="PowerDNS manual" /><link rel="up" href="powerdnssec-auth.html" title="Chapter 12. Serving authoritative DNSSEC data" /><link rel="prev" href="dnssec-modes.html" title="8. Modes of operation" /><link rel="next" href="dnssec-performance.html" title="10. Performance" /></head><body><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">9. Security</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="dnssec-modes.html">Prev</a> </td><th width="60%" align="center">Chapter 12. Serving authoritative DNSSEC data</th><td width="20%" align="right"> <a accesskey="n" href="dnssec-performance.html">Next</a></td></tr></table><hr /></div><div class="section" title="9. Security"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="dnssec-security"></a>9. Security</h2></div></div></div><p>
During typical PowerDNSSEC operation, the private part of the signing keys are 'online', which can be compared
to operating an HTTPS server, where the certificate is available on the webserver for cryptographic purposes.
</p><p>
In some settings, having such (private) keying material available online is considered undesirable. In this case,
consider running in pre-signed mode.
</p></div><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="dnssec-modes.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="powerdnssec-auth.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="dnssec-performance.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">8. Modes of operation </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 10. Performance</td></tr></table></div></body></html>
