Subject: Re: Speaking of DNS server software... Date: Tue, Aug 12, 2025 at 10:55:00AM +0200 Quoting Endre Szabo via NANOG ([email protected]): > Yes, and for a reason: > https://github.com/coredns/coredns/issues/4565#issuecomment-816463715 > > > On 11.08.2025, at 17:37, Smith via NANOG <[email protected]> wrote: > > > > CoreDNS is still without first-class NSEC3 DNSSEC support right ? Last > > time I looked it needed a third-party community plugin. Not a good look.
Tangentially, I must say I'm in agreement with Miek (who wrote the "nope" in the link above). NSEC3 is a solution in search of a problem, and at significant complexity cost. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR +46 705 989668 I know things about TROY DONAHUE that can't even be PRINTED!!
signature.asc
Description: PGP signature
_______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/PXLL7WYN6BQAZVGZGG6BFGUWGEXFSUFO/
