While learning DNSSEC I came across CloudFlare's solution for DNSSEC negative answers, "NSEC Black Lies", also published as Internet Draft https://tools.ietf.org/html/draft-valsorda-dnsop-black-lies-00 and explained in more detail on https://blog.cloudflare.com/black-lies/

Has PowerDNS any plans to support this feature? Black lies seem to solve many issues with NSEC/NSEC3 in a rather elegant way and at least according to CloudFlare, also complying standards.

With best regards,

--
Cristian Seres
_______________________________________________
Pdns-dev mailing list
Pdns-dev@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-dev

Reply via email to