The same zone NSEC3 signed with a.example.com in OPTOUT range
example.com SOA
example.com NS ns.example.com
example.com DNSKEY …
example.com NSEC3PARAM 1 0 0 -
example.com XHASH …
3QNILC4QRC2P5CRN7JGVB5S3BPG0SHUV.example.com 1 1 0 - NSEC3 1 1 0 -
ONIB9MGUB9H0RML3CDF5BGRJ59DKJHVK.example.com NS RRSIG XHASH
a.example.com NS ns.a.example.com
ns.a.example.com A …
b.example.com NS ns.b.example.com
b.example.com XHASH …
ns.b.example.com A …
ns.example.com A …
ns.example.com AAAA …
ns.example.com XHASH …
ONIB9MGUB9H0RML3CDF5BGRJ59DKJHVK.example.com NSEC3 1 1 0 -
PTJ67J96LVVVBU5K3V6N10B6QMO17275 NS SOA RRSIG DNSKEY NSEC3PARAM XHASH
PTJ67J96LVVVBU5K3V6N10B6QMO17275.example.com NSEC 1 1 0 -
3QNILC4QRC2P5CRN7JGVB5S3BPG0SHUV.example.com A AAAA RRSIG XHASH
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
