[dns-operations] NSEC3 parameter selection (BCP: 1 0 0 -)

[Matthew Richardson]

At Mon, 18 Jan 2021 13:55:21 -0500, Viktor Dukhovni wrote:-

>    2.  Changing the salt takes some care, so "nobody" does it.

Any pointers to the "care" required when changing salt (or the iteration
count) would be appreciated.  My searches reveal little information.  In
particular, what timing issues exist with respect to the zone's TTLs?

With any thanks.

Best wishes,
Matthew