[dns-operations] NSEC3 parameter selection (BCP: 1 0 0 -)
matthew-l at itconsult.co.uk
Tue Jan 19 09:24:09 UTC 2021
At Mon, 18 Jan 2021 13:55:21 -0500, Viktor Dukhovni wrote:-
> 2. Changing the salt takes some care, so "nobody" does it.
Any pointers to the "care" required when changing salt (or the iteration
count) would be appreciated. My searches reveal little information. In
particular, what timing issues exist with respect to the zone's TTLs?
With any thanks.
More information about the dns-operations