dnsviz.net: has errors; select the "Denial of existence" DNSSEC option to see them.

[Taavi Eomäe]

Hi,

If you select the "Denial of existence" under options, then you will see 
the exact details behind those errors.

It seems like your NSEC3 iterations count is not 0, but it should be 0 
to alleviate computational burdens. See RFC9276, Sec. 3.1.


Best regards
Taavi

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4664 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20250207/10cce1c7/attachment.p7s>