Hello,
sorry for that. I tought it is documented on our Wiki, but it was not. It is
already updated:
https://gitlab.labs.nic.cz/labs/knot/wikis/dnssec-limitations
I have also created a ticket to give it more priority:
https://gitlab.labs.nic.cz/labs/knot/issues/229
Jan
Dne Po 7. dubna 2014 15:35:47, Klaus Darilion napsal(a):
OK. You should mention that in your docs to avoid that
people look for
such a feature.
regards
Klaus
On 07.04.2014 12:23, Jan Včelák wrote:
> Hello Klaus,
>
> NSEC3 opt-out is currently not supported.
>
> It is on our DNSSEC plan, but I can't promise you any deadline...
>
> Jan
>
> Dne Po 7. dubna 2014 10:48:58, Klaus Darilion napsal(a):
>> Hi!
>>
>> I use knot 1.4.4 and sign my zones with NSEC3.
>>
>> Is NSEC3 with opt-out supported?
>>
>> If yes, how can I activate opt-out?
>>
>> I tried setting the flag in the NSEC3PARAM record but apparently this
>> does not activate opt-out.
>>
>> Thanks
>> Klaus