dnssec-policy "simple_alg15" { dnskey-ttl 7200; keys { csk lifetime unlimited algorithm ed25519; }; nsec3param iterations 0 optout no salt-length 0; }; dnssec-policy "default_alg13" { dnskey-ttl 86400; keys { ksk lifetime unlimited algorithm 13; zsk lifetime P90D algorithm 13; }; };