On Tue, Mar 28, 2017 at 1:28 PM, Paul Hoffman <[email protected]> wrote: [...]
> - White Lies can be done with NSEC, not just with NSEC3. RFC 7129 calls > these "minimally covering NSEC records". I would think that doing NSEC > White Lies would require less CPU than doing NSEC3 White Lies (but I > haven't done the work to be sure). > I would say that's almost definitely true, but I haven't done the empirical work either. The reason Sharon's slides and the research paper only show performance results versus NSEC3 white lies is that was the only white lies implementation in a production quality open-source nameserver available/known to us at the time of the measurement work. -- Shumon Huque
_______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
