dnsviz.net: has errors; select the "Denial of existence" DNSSEC option to see them.
Hans Mayer
isc at ma.yer.at
Thu Feb 13 16:33:36 UTC 2025
Hi Taavi,
It seems I was blind and didn't see the button.
Problem solved. Iterations set to 0 and salt to null. Everything green
now at DNSviz.
Best regards
Hans
--
On 07.02.25 17:05, Taavi Eomäe wrote:
> Hi,
>
> If you select the "Denial of existence" under options, then you will
> see the exact details behind those errors.
>
> It seems like your NSEC3 iterations count is not 0, but it should be 0
> to alleviate computational burdens. See RFC9276, Sec. 3.1.
>
>
> Best regards
> Taavi
>
More information about the bind-users
mailing list