Re: [knot-dns-users] Knot NSEC3 with opt-out

Hello, sorry for that. I tought it is documented on our Wiki, but it was not. It is already updated: https://gitlab.labs.nic.cz/labs/knot/wikis/dnssec-limitations I have also created a ticket to give it more priority: https://gitlab.labs.nic.cz/labs/knot/issues/229 Jan Dne Po 7. dubna 2014 15:35:47, Klaus Darilion napsal(a): > OK. You should mention that in your docs to avoid that people look for > such a feature. > > regards > Klaus > > On 07.04.2014 12:23, Jan Včelák wrote: >> Hello Klaus, >> >> NSEC3 opt-out is currently not supported. >> >> It is on our DNSSEC plan, but I can't promise you any deadline... >> >> Jan >> >> Dne Po 7. dubna 2014 10:48:58, Klaus Darilion napsal(a): >>> Hi! >>> >>> I use knot 1.4.4 and sign my zones with NSEC3. >>> >>> Is NSEC3 with opt-out supported? >>> >>> If yes, how can I activate opt-out? >>> >>> I tried setting the flag in the NSEC3PARAM record but apparently this >>> does not activate opt-out. >>> >>> Thanks >>> Klaus