| github | https://github.com/omoerbeek |
| web | https://www.drijf.net |
@mnordhoff Bind moved to 50 in version 9.19: https://kb.isc.org/v1/docs/dnssec-signed-zones-best-practice-guidance-for-nsec3-iterations#changes-introduced-to-bind-from-919
Knot resolver also uses 50 since 6.0.6: https://www.knot-resolver.cz/documentation/master/NEWS.html#knot-resolver-6-0-6-2024-02-13
NSEC3 is a DNSSEC mechanism providing proof of nonexistence by asserting that there are no names that exist between two domain names within a zone. Unlike its counterpart NSEC, NSEC3 avoids directly disclosing the bounding domain name pairs. This document provides guidance on setting NSEC3 parameters based on recent operational deployment experience. This document updates RFC 5155 with guidance about selecting NSEC3 iteration and salt parameters.
How about a new #OpenBSD story for breakfast (if you're having breakfast now, that is)?
The first episode of the story of OpenBSD and Motorola 88000 processors can be read at http://miod.online.fr/software/openbsd/stories/m88k1.html. With pictures!
PowerDNS DNSdist 2.1.0-beta2 Released
https://blog.powerdns.com/2026/03/12/powerdns-dnsdist-2.1.0-beta2-released
PowerDNS Recursor 5.4.0 Released
https://blog.powerdns.com/2026/03/09/powerdns-recursor-5.4.0-released
Miod Vallat
Vee
PowerDNS
aerique