Thanks Peter and Jose for a quick reply Appreciated. That for sure i will go with NSEC3 but whom to actually hit NSEC3-inclusive or NSEC3-narrow
Please advice as not able to figure the difference between both NSEC3 modes. Thanks & Regards Parth On Fri, Apr 13, 2012 at 11:31 AM, Peter van Dijk < [email protected]> wrote: > Hi! > > On Apr 13, 2012, at 4:51 , José Arthur Benetasso Villanova wrote: > > > When you add / remove records, you need to call 'pdnssec rectify-zone > > example.com' to make sure that the records orders are set properly. > > This is important to use NSEC, that need the record before and after > > to give a signed denial of existence. As far I remember, the field > > content is not use in NSEC, so you can change this at will. > > Both NSEC and NSEC3 use the order name field; NSEC3-narrow does not. > > Kind regards, > -- > Peter van Dijk > Netherlabs Computer Consulting BV - http://www.netherlabs.nl/ > > _______________________________________________ > Pdns-users mailing list > [email protected] > http://mailman.powerdns.com/mailman/listinfo/pdns-users > > > >
_______________________________________________ Pdns-users mailing list [email protected] http://mailman.powerdns.com/mailman/listinfo/pdns-users
