Re: [knot-dns-users] knot 2.4 dnssec failure

Hello Bastien, The origin of the \x06policy string comes from obsolete policy  configuration detection. So don't worry about the value. Unfortunately, I don't understand why  the backward compatibility doesn't work in your case. I guess, you haven't migrated to the new  DNSSEC configuration yet. I would recommend you to do it now. Just create equivalent policies  configuration as you have in the policy JSON files (see  https://www.knot-dns.cz/docs/2.4/html/configuration.html#automatic-ke y-management) and assign them to corresponding zones. The policy item in zone JSON  files is no longer used. If the migration is not possible now, please send me your configuration  and policy files and I will deeply analyse the problem.