--- Begin Message ---
Hi Viktor,

On 4/12/21 7:51 PM, Viktor Dukhovni wrote:
my advice is to use NSEC unless you have an absolutely compelling case to attempt to deter zone enumeration

Would you please elaborate on why that is your opinion / advice?

It seems contrary to the litmus test of which is more secure vs difficult to implement.

I'm trying to understand your thought process and subsequently make a more informed decision myself.

Thank you for your time.



--
Grant. . . .
unix || die

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


--- End Message ---
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to