Change nsec3param default to iter 0 salt-length 0 (!5513) · Merge requests · ISC Open Source Projects / BIND

Matthijs Mekking requested to merge 2956-nsec3param-no-salt-n-pepa into main Oct 20, 2021

When using 'nsec3param' in 'dnssec-policy' and no specific parameters are provided, default to zero additional iterations and no salt, as recommended by draft-ietf-dnsop-nsec3-guidance.

Closes #2956 (closed)

Change nsec3param default to iter 0 salt-length 0

Merge request reports