Re: [DNSOP] Discussions of NSEC5

2017-03-28 Thread Shumon Huque
On Tue, Mar 28, 2017 at 1:28 PM, Paul Hoffman wrote: [...] > - White Lies can be done with NSEC, not just with NSEC3. RFC 7129 calls > these "minimally covering NSEC records". I would think that doing NSEC > White Lies would require less CPU than doing NSEC3 White Lies (but I > haven't done the

[DNSOP] Discussions of NSEC5

2017-03-28 Thread Paul Hoffman
During the mic discussions of NSEC5 yesterday, some speakers conflated a few things. - NSEC3 with a good dictionary allows a fair amount of zone enumeration, but NSEC3 White Lies does not. Sharon did a good job of differentiating this in her slides, but people talking about the need for NSEC5