[dns-operations] NSEC3PARAM iteration count update
Viktor Dukhovni
ietf-dane at dukhovni.org
Sun Jan 7 20:12:24 UTC 2018
> On Jan 7, 2018, at 2:56 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
>
> One might even encourage the maintainers of authoritative server
> software to artificially cap the user-specified iteration count
> to the recommended value unless an additional "I really mean it"
> override is also configured. With that, the next zone resigning
> would have an iteration count of max(configured, 5155bis limit).
Oops: s/max/min/
--
Viktor.
More information about the dns-operations
mailing list