[dns-operations] nsec vs nsec3 use

Grant Taylor gtaylor at tnetconsulting.net
Tue Apr 13 22:50:10 UTC 2021


On 4/13/21 10:40 AM, Viktor Dukhovni wrote:
> It is fine to choose NSEC3 (with a low iteration count, see below), 
> but often not particularly beneficial.

Thank you for the additional information Viktor, Tony, and Vladimir.  I 
will take what you have shared, do some more reading, and hopefully come 
out wiser for it.  :-)



-- 
Grant. . . .
unix || die

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4013 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20210413/d9a2eb3b/attachment.bin>


More information about the dns-operations mailing list