Skip to content

Change nsec3param default to iter 0 salt-length 0

Matthijs Mekking requested to merge 2956-nsec3param-no-salt-n-pepa into main

When using 'nsec3param' in 'dnssec-policy' and no specific parameters are provided, default to zero additional iterations and no salt, as recommended by draft-ietf-dnsop-nsec3-guidance.

Closes #2956 (closed)

Merge request reports