[dns-operations] NSEC3 parameter selection (BCP: 1 0 0 -)

Matthew Richardson matthew-l at itconsult.co.uk
Tue Jan 19 09:24:09 UTC 2021

At Mon, 18 Jan 2021 13:55:21 -0500, Viktor Dukhovni wrote:-

>    2.  Changing the salt takes some care, so "nobody" does it.

Any pointers to the "care" required when changing salt (or the iteration
count) would be appreciated.  My searches reveal little information.  In
particular, what timing issues exist with respect to the zone's TTLs?

With any thanks.

Best wishes,

More information about the dns-operations mailing list