Implementations

Java-based Tools

• Signing tools: http://www.verisignlabs.com/dnssec-tools/. This is a set of tools that contain a zone signer that will sign zones using NSEC3.

• Validating full resolver: http://www.rfc.se/unbound/downloads/unbound-prototype-0.08nsec3.tar.gz. The NSEC3-capable version may also be fetched directly from subversion: http://svn.verisignlabs.com/unbound/proto/branches/nsec3-branch

Perl-based Tools

• tarball: http://www.rfc.se/fpdns/perltools-r186.tar.gz. Perl tools

C-based Tools

• NLnetLabs LDNS with NSEC3 capabilities: http://jelte.nlnetlabs.nl/Projects/NSEC3/ldns-1.1.0_pre_20060508_2.tar.gz
• NLnetLabs NSD3 with NSEC3 capabilites: http://www.wcawijngaards.dds.nl/nsd-3.0.0-20060509.tar.gz

note: This is the latest development snapshot of NSD3, please use this instead of Roy's NSD-3.0.0-FRANKFURT.tar.gz. This version will be available at least until Wednseday

• The url for ISC's version of an NSEC3 capable authoritative server is posted in 'The Jabber Room'
• The tarball for Ben Laurie's NSEC3 capable version of NSD is at: http://www.links.org/dnssec/nsd-ben.tgz

• A version of NSD-3 with NSEC3 that compiles clean on both BSD and OSX without the zonec buglet is available at http://www.rfc.se/fpdns/nsd-roy/nsd-3.0.0-FRANKFURT.tar.gz, please use the NLnetLabs version (see earlier note) over this one !

Pilots

• NSEC3 signed versions of .com and .net: http://nsec3.verisignlabs.com.