[dns-operations] NS1 updating codepoint for NXNAME

Shumon Huque shuque at gmail.com
Wed Sep 11 23:33:45 UTC 2024


On Mon, Sep 9, 2024 at 12:42 PM Viktor Dukhovni <ietf-dane at dukhovni.org>
wrote:

> On Mon, Sep 09, 2024 at 10:50:14AM -0400, Shumon Huque wrote:
>
> > > Dear colleagues,
> > >
> > > NS1 will be rolling out an update for Compact Denial of Existence in
> > > DNSSEC (draft-ietf-dnsop-compact-denial-of-existence) which will
> > > change the codepoint for the NXNAME meta record.
> > >
> > > The new implementation will use 128 allocated by IANA replacing the
> > > private value 65283.
> > >
> > > We are currently planning to deploy the change in the following weeks.
> > >
> >
> > Thank you for the notice Jan.
> >
> > I want to note that Cloudflare has also (recently) moved to TYPE 128
> > for NXNAME.
>
> Indeed confirmed live deployment for Cloudflare, and not quite yet for NS1:
>

[...]

NS1 looks completed now too:

$ dig +dnssec +noall +authority nxd1234.ns1.com | awk '$4 == "NSEC"'
nxd1234.ns1.com.        3576    IN      NSEC    \000.nxd1234.ns1.com. RRSIG
NSEC TYPE128

Shumon.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20240911/fca89414/attachment.html>


More information about the dns-operations mailing list