[dns-operations] signing a zone with NSEC3 records.

bert hubert bert.hubert at netherlabs.nl
Thu Sep 10 08:03:07 UTC 2009


On Thu, Sep 10, 2009 at 8:50 AM, Sander Smeenk<ssmeenk at freshdot.net> wrote:
> Personally i don't think NSEC3 is so much more 'complex'

I suggest trying to implement it, or even better, trying to debug a
DNSSEC problem when lots of your datapoints have been hashed beyond
recognition.

   Bert



More information about the dns-operations mailing list