[dns-operations] Was: .KE denial of existence partly broken? (Viktor Dukhovni)

Benno Overeinder benno at NLnetLabs.nl
Mon Jul 23 11:43:58 UTC 2018

Hi Daniel,

On 20/07/2018 15:20, Daniel Shaw wrote:
> This does seem to be a bug in the older NSD version. The use-case here
> is NSEC3 non-existence proofs in an opt-out signed zone. We've not yet
> tested other sorts of queries/zones. However we will (as Calvin
> mentioned), be upgrading the NSD version on the "troublesome" instances
> early next week.

This might be fixed in NSD 4.1.11 and on wards.

See https://www.nlnetlabs.nl/projects/nsd/download/ for details and bug
fixes for the various NSD releases.


-- Benno

Benno J. Overeinder
NLnet Labs

More information about the dns-operations mailing list