Opened 13 years ago

Closed 12 years ago

#14 closed enhancement (fixed)

probedns: query OPTOUT for NSEC3

Reported by: wander Owned by: wander
Priority: important Component: probedns
Keywords: Cc:

Description

For zones using NSEC3PARAM, retrieve NXDOMAIN answer with NSEC3 records and read OPTOUT bit from flags.

NSEC3PARAM record is not suitable because OPTOUT bit is always clear in NSEC3PARAM (as per ​http://tools.ietf.org/html/rfc5155#section-4.1.2).

Change History (2)

comment:1 Changed 12 years ago by wander

Also query for opt-out in NSEC records, see RFC 4956 (titled as opt-in).

comment:2 Changed 12 years ago by wander

Owner: set to wander
Resolution: → fixed
Status: new → closed

In 1260:

Error: Processor CommitTicketReference failed
Unsupported version control system "svn": No module named svn
Note: See TracTickets for help on using tickets.