On Fri, Mar 10, 2017 at 01:15:42PM -0500, Shumon Huque wrote: ... > > Apparently there are many folks in the community who think so, otherwise > NSEC3 would not have been developed. I personally don't care for any zones
I know others have already stated this but zone enumeration, at least at that time, was never the real reason for NSEC3, size of signing zones with mostly unsigned delegations was. This was only needed because of the wg lack of management and sensibility to operators needs leading to the historical debacle of opt-in. We changed the name, and voila opt-out ;-) Fred _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop