On 01/13/2018 01:02 AM, T.Suzuki wrote: > "Forged Delegation Injection into Empty Non-Terminal with NSEC3" > http://www.e-ontap.com/dns/entpoison.html > > Is the NSEC3 proofing what? Isn't this just the expected result of using NSEC3 opt-out? Thanks, Florian