bind10-devel-20120301 and NSEC3

[Spain, Dr. Jeffry A.]

Dear bind10 developers: I was reviewing your conference call notes from today, in the Release Status section, regarding NSEC3. Is my understanding correct that bind10-devel-20120301 b10-auth will be able to provide NSEC3 closest encloser proofs for nonexistent records?

If this is true, then it would be pretty easy for me to take one of my test zones and convert it to NSEC3 with my bind9.9.0 inline signing server that is feeding two bind10 slave authoritative servers. Would that provide a useful test of the new NSEC3 functionality?

Is it also true that you are planning to work on DNSSEC zone signing and key management for bind10 in development year 4? Just curious. Thanks.

Jeffry A. Spain
Network Administrator
Cincinnati Country Day School