On Thu, May 06, 2010 at 02:25:45PM +0530,
rams <[email protected]> wrote
a message of 36 lines which said:
> How to sign a zone for getting NSEC3, NSEC3PARAM RR's in a signed zone.
Regarding this question and your previous one, it may be a good idea
to start reading the documentation:
-3 salt
Generate a NSEC3 chain with the given hex encoded salt. A dash
(salt) can be used to
indicate that no salt is to be used when generating the NSEC3
chain.
-H iterations
When generating a NSEC3 chain use this many interations. The
default is 100.
-A When generating a NSEC3 chain set the OPTOUT flag on all NSEC3
records and do not
generate NSEC3 records for insecure delegations.
_______________________________________________
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users
