[dns-operations] Forged Delegation Injection into Empty Non-Terminal with NSEC3

[Viktor Dukhovni]

> On Jan 17, 2018, at 10:31 PM, Lanlan Pan <abbypan at gmail.com> wrote:
> 
> Real world is few DNSSEC deployment, and hard to imagine that many operators will know what is NSEC3.

I am tracking 5.14 million domains with DNSSEC enabled.  IIRC the majority
are using NSEC3, mostly without opt-out and with reasonably low iteration
counts as reported previously.

-- 
	Viktor.