Hi Taavi,
It seems I was blind and didn't see the button.
Problem solved. Iterations set to 0 and salt to null. Everything green now at DNSviz.

Best regards
Hans

--


On 07.02.25 17:05, Taavi Eomäe wrote:
Hi,

If you select the "Denial of existence" under options, then you will see the exact details behind those errors.

It seems like your NSEC3 iterations count is not 0, but it should be 0 to alleviate computational burdens. See RFC9276, Sec. 3.1.


Best regards
Taavi

--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to