[dns-operations] NSEC3 parameter selection (BCP: 1 0 0 -)

Paul Vixie paul at redbarn.org
Mon Jan 18 20:31:36 UTC 2021


On Mon, Jan 18, 2021 at 03:54:49PM +0000, Roy Arends wrote:
> Hi Viktor,
> 
> > On 18 Jan 2021, at 06:57, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> > 
> > TL;DR.  The BCP NSEC/NSEC3 choices are IMHO:
> > 
> >    ...
> 
> Hi Viktor,
> 
> I agree with you. 
> 
> ...

so do i. but i'm concerned about that. most of the operators of dnssec
machinery have not been born yet, and most dnssec machinery that will
ever be used has not been created yet. i don't think those future operators
and creators will read this mailing list's archives. where can we put the
agreed wisdom of our era so that it can be easily and persistently found
both in this and future eras?

(same for the empty salt thread, and likely many others past and future.)

-- 
Paul Vixie



More information about the dns-operations mailing list