dnsviz.net: has errors; select the "Denial of existence" DNSSEC option to see them.

Hans Mayer isc at ma.yer.at
Thu Feb 13 16:33:36 UTC 2025


Hi Taavi,
It seems I was blind and didn't see the button.
Problem solved. Iterations set to 0 and salt to null. Everything green 
now at DNSviz.

Best regards
Hans

-- 


On 07.02.25 17:05, Taavi Eomäe wrote:
> Hi,
>
> If you select the "Denial of existence" under options, then you will 
> see the exact details behind those errors.
>
> It seems like your NSEC3 iterations count is not 0, but it should be 0 
> to alleviate computational burdens. See RFC9276, Sec. 3.1.
>
>
> Best regards
> Taavi
>


More information about the bind-users mailing list