All Topics
All Topics
Technology
Technology
AI
AI
Business
Business
Entertainment
Entertainment
News
News
Programming
Programming
Security
Security
Science
Science
Design
Design
Environment
Environment
Finance
Finance
Crypto
Crypto
Politics
Politics
Sports
Sports
Education
Education
Gaming
Gaming
Art
Art
Music
Music
Health
Health
Books
Books
Food
Food
Travel
Travel
Personal
Personal
Bluesky
Twitter

DNS - NSEC3 support for DNSSEC

1y ago

Source

CloudflareDNS - NSEC3 support for DNSSECcloudflare.com
Snippet from the RSS feed
Enterprise customers can now select NSEC3 as method for proof of non-existence on their zones. What's new: NSEC3 support for live-signed zones – For both primary and secondary zones that are configured to be live-signed (also known as "on-the-fly signing"), NSEC3 can now be selected as proof of non-existence. NSEC3 support for pre-signed zones – Secondary zones that are transferred to Cloudflare in a pre-signed setup now also support NSEC3 as proof of non-existence. For more information and how to enable NSEC3, refer to the NSEC3 documentation .

You might also wanna read

Azure Domain Registrar Limitations with Cloudflare DNS Integration

The article discusses technical limitations when using Azure as a domain registrar with Cloudflare's DNS services. Specifically, it notes th

news.ycombinator.com·8mo ago

DNSSEC Debugger Analysis of nic.de: Chain of Trust Verification

The DNSSEC Debugger tool from VeriSign Labs analyzes DNSSEC configuration problems for the domain nic.de. It checks DS records, RRSIGs, DNSK

dnssec-analyzer.verisignlabs.com·2mo ago

DENIC DNS Disruption Affects DNSSEC-Signed .de Domains

DENIC eG, the registry for .de domains, is experiencing a DNS service disruption affecting all DNSSEC-signed .de domains. The root cause is

status.denic.de·2mo ago

Reflections on Final Root DNSSEC Key Ceremony and Internet Security Evolution

The article is a personal reflection from a retiring Root DNSSEC KSK Crypto Officer, detailing their final key ceremony and the transition o

technotes.seastrom.com·7mo ago

DynIP: Dynamic DNS Service with 60-Second Updates and DNSSEC Support

This article appears to be a product/landing page for "DynIP," a Dynamic DNS service that offers 60-second updates, RFC 2136 TSIG support, B

dynip.dev·1mo ago

Browser Support for RFC9460 HTTPS DNS Records Remains Inconsistent in 2025

The article discusses the current state of browser support for RFC9460 HTTPS Resource Records (HTTPS RRs) as of December 2025. Despite being

netmeister.org·6mo ago

Comments

Sign in to join the conversation.

No comments yet. Be the first.