[dns-operations] [Ext] Re: Evaluation of NSEC3-encloser attack

Edward Lewis edward.lewis at icann.org
Thu Apr 4 19:14:11 UTC 2024

Previous message (by thread): [dns-operations] Research of real-life abuse of dangling DNS records
Next message (by thread): [dns-operations] Testing of SVCB/HTTPS records
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On 3/27/24, 17:34, "dns-operations on behalf of Jim Reid" <dns-operations-bounces at dns-oarc.net on behalf of jim at rfc1035.com> wrote:

>IMO, there’s no added value in using NSEC3.

NSEC3 has opt-out, which is important for large, delegation-centric zones.  Noting, I'm no fan of NSEC3, but it does have that going for it.

Previous message (by thread): [dns-operations] Research of real-life abuse of dangling DNS records
Next message (by thread): [dns-operations] Testing of SVCB/HTTPS records
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the dns-operations mailing list