DNSSEC, walking and signing
DNSSEC, walking and signing
Posted Sep 25, 2012 17:05 UTC (Tue) by dkg (subscriber, #55359)In reply to: DNSSEC, walking and signing by job
Parent article: LSS: DNSSEC
job wrote:
Just generate NSEC3 records instead of NSEC when you sign your zone.Alas, NSEC3 is not particularly secure against zone enumeration either.