dnsext-6----Page:3
1 2 3 4 5 6
|
NSEC3 hashed labels Labels are individually hashed. empty non-terminals are preserved to avoid EXIST or similar workarounds. Labels are optionally hashed. So we have bw compatibility with NSEC. Not needed ? Don’t use it ! Includes salt to increase cost of dictionary attacks. Salt is 24 bits. |