Ticket #47 (defect)
Opened 2 years ago
nsec3 zones can have CNAME and other data issues w/ older servers
Status: new
| Reported by: | marka@isc.org | Assigned to: | ben |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | drafts | Version: | |
| Severity: | blocker | Keywords: | |
| Cc: |
Documennt that there are some NSEC3 zones that are not DNSSEC 4034 safe let alone RFC 1035 safe.
e.g.
MM6OHIUFMG05ST4UQQUVIJ0QG6UF1PIF.optoutempty.ws.nsec3.org. 3600 IN NSEC3 1 1 10 AFFE 0DIBIVDPK0P88S11VP5OVOILSLC21QLI MM6OHIUFMG05ST4UQQUVIJ0QG6UF1PIF.optoutempty.ws.nsec3.org. 3600 IN CNAME foo