Add NSEC3 option for DNSSEC (prevent zone enumeration)
Please add an option in DNSSEC configuration to use NSEC3.
NSEC3 does not allow DNS zone enumeration like NSEC.
Documentation :
https://bind9.readthedocs.io/en/v9.18.14/dnssec-guide.html#nsec-or-nsec3
Regards,
Laurent.
1
vote
Laurent Chouraki
shared this idea