I am running my DNS server on 3 external VPS servers. One of them was set up to be the primary DNS server and would in addition to the zone files contain the DNSSEC private keys. This is not optimal. Having your DNSSEC keys on a server external to your location means that they can… Continue reading How to keep your keys secure and private