[dns-operations] [Ext] Re: Cloudflare TYPE65283

paul at redbarn.org paul at redbarn.org
Tue Apr 11 15:10:58 UTC 2023

<<Sure, the cost of replacing NSEC and NSEC3 would be another resource record type code roll (such as 5->8, RSA-SHA1 vs RSA-SHA1-NSEC3).  But a new on-the-fly denial of existence might prove to be worth it in operations.>>

Well, we are overdue for starting over on dnssec, which we used to do every two years or so. But does the next generation have the will to do so?

p vixie

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20230411/f22e9267/attachment.html>

More information about the dns-operations mailing list