[dns-operations] Forged Delegation Injection into Empty Non-Terminal with NSEC3
ietf-dane at dukhovni.org
Thu Jan 18 03:52:58 UTC 2018
> On Jan 17, 2018, at 10:31 PM, Lanlan Pan <abbypan at gmail.com> wrote:
> Real world is few DNSSEC deployment, and hard to imagine that many operators will know what is NSEC3.
I am tracking 5.14 million domains with DNSSEC enabled. IIRC the majority
are using NSEC3, mostly without opt-out and with reasonably low iteration
counts as reported previously.
More information about the dns-operations