[dns-operations] [Ext] Re: Cloudflare TYPE65283

[paul at redbarn.org]

<<Sure, the cost of replacing NSEC and NSEC3 would be another resource record type code roll (such as 5->8, RSA-SHA1 vs RSA-SHA1-NSEC3).  But a new on-the-fly denial of existence might prove to be worth it in operations.>>


Well, we are overdue for starting over on dnssec, which we used to do every two years or so. But does the next generation have the will to do so?


p vixie

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20230411/f22e9267/attachment.html>