[dns-operations] Was: .KE denial of existence partly broken? (Viktor Dukhovni)

[Benno Overeinder]

Hi Daniel,

On 20/07/2018 15:20, Daniel Shaw wrote:
> This does seem to be a bug in the older NSD version. The use-case here
> is NSEC3 non-existence proofs in an opt-out signed zone. We've not yet
> tested other sorts of queries/zones. However we will (as Calvin
> mentioned), be upgrading the NSD version on the "troublesome" instances
> early next week.

This might be fixed in NSD 4.1.11 and on wards.

See https://www.nlnetlabs.nl/projects/nsd/download/ for details and bug
fixes for the various NSD releases.

Regards,

-- Benno


-- 
Benno J. Overeinder
NLnet Labs
https://www.nlnetlabs.nl/