Subject: Re: Speaking of DNS server software... Date: Tue, Aug 12, 2025 at 10:55:00AM +0200 Quoting Endre Szabo via NANOG (nanog@lists.nanog.org):
Yes, and for a reason: https://github.com/coredns/coredns/issues/4565#issuecomment-816463715
On 11.08.2025, at 17:37, Smith via NANOG <nanog@lists.nanog.org> wrote:
CoreDNS is still without first-class NSEC3 DNSSEC support right ? Last time I looked it needed a third-party community plugin. Not a good look.
Tangentially, I must say I'm in agreement with Miek (who wrote the "nope" in the link above). NSEC3 is a solution in search of a problem, and at significant complexity cost. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR +46 705 989668 I know things about TROY DONAHUE that can't even be PRINTED!!