[dns-operations] NSEC3PARAM iteration count update

Viktor Dukhovni ietf-dane at dukhovni.org
Sun Jan 7 20:12:24 UTC 2018



> On Jan 7, 2018, at 2:56 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> 
> One might even encourage the maintainers of authoritative server
> software to artificially cap the user-specified iteration count
> to the recommended value unless an additional "I really mean it"
> override is also configured.  With that, the next zone resigning
> would have an iteration count of max(configured, 5155bis limit).

Oops: s/max/min/

-- 
	Viktor.




More information about the dns-operations mailing list