I haven't found a simple way of generating a dns record. gpg --export-options export-dane email@address.tld is one way, but I can't get nsupdate to accept that format.
reply