[dns-operations] Forged Delegation Injection into Empty Non-Terminal with NSEC3

Viktor Dukhovni ietf-dane at dukhovni.org
Thu Jan 18 03:52:58 UTC 2018

> On Jan 17, 2018, at 10:31 PM, Lanlan Pan <abbypan at gmail.com> wrote:
> Real world is few DNSSEC deployment, and hard to imagine that many operators will know what is NSEC3.

I am tracking 5.14 million domains with DNSSEC enabled.  IIRC the majority
are using NSEC3, mostly without opt-out and with reasonably low iteration
counts as reported previously.


More information about the dns-operations mailing list