From dot@dotat.at Thu Jun 8 16:15:40 2017 MIME-Version: 1.0 In-Reply-To: X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL autolearn=ham autolearn_force=no version=3.4.0 X-RT-Interface: API X-Cam-Antivirus: no malware found References: Message-ID: content-type: TEXT/PLAIN; charset="utf-8" X-RT-Original-Encoding: utf-8 Received: from mx.pao1.isc.org (mx.pao1.isc.org [149.20.64.53]) by bugs.isc.org (Postfix) with ESMTP id 5EB7271B5A8 for ; Thu, 8 Jun 2017 16:15:40 +0000 (UTC) Received: from ppsw-30.csi.cam.ac.uk (ppsw-30.csi.cam.ac.uk [131.111.8.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id 71D893493BB for ; Thu, 8 Jun 2017 16:15:37 +0000 (UTC) Received: from grey.csi.cam.ac.uk ([131.111.57.57]:55027) by ppsw-30.csi.cam.ac.uk (ppsw.cam.ac.uk [131.111.8.136]:25) with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256) id 1dJ05w-0004e1-d9 (Exim 4.89) for bind9-review@isc.org (return-path ); Thu, 08 Jun 2017 17:15:36 +0100 Delivered-To: bind9-review@bugs.isc.org User-Agent: Alpine 2.11 (DEB 23 2013-08-11) Subject: Re: [ISC-Bugs #45183] [PATCH] Alternative NSEC3 mode for nsec3hash Return-Path: X-Original-To: bind9-review@bugs.isc.org Date: Thu, 8 Jun 2017 17:15:36 +0100 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mx.pao1.isc.org To: "Evan Hunt via RT" X-Cam-Scannerinfo: http://help.uis.cam.ac.uk/email-scanner-virus From: "Tony Finch" RT-Message-ID: Content-Length: 2313 Evan Hunt via RT wrote: > Revised Tony's patch to use a "-r" ("rdata format") command line option instead > of a different command name. Aww, the reason for that was to make it easy to copy and paste in the terminal, without having to configure a shell alias, e.g. $ dig +noall +authority +multiline +dnssec com txt com. 842 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. ( 1496938278 ; serial 1800 ; refresh (30 minutes) 900 ; retry (15 minutes) 604800 ; expire (1 week) 86400 ; minimum (1 day) ) com. 842 IN RRSIG SOA 8 1 900 ( 20170615161118 20170608150118 27302 com. E3gsDnskMAcuoGABm0/wMgR7DWZp8jB6hxns4YoIsr5q DpW8krVCT1+pOvWk1txNKKv0FKTxnrFsXq0g7oXLDQV3 KLFEsCU2K1EUZRYSOe3SGgQlAGRehTnaxfNP1ouxpd/D bTgrL2/gaBLusiWbrpNIddJUHdFTPIxwySXRUOE= ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 842 IN RRSIG NSEC3 8 2 86400 ( 20170614044955 20170607033955 27302 com. L7uifuxG3NekZAUdohvpumfcsofMciePoRre/O/tt6ic Gmku6oQfuLZSZXWMemgW5Fe66JGPe8RixH2FSOM8rO9k zG3zlssQM40z9wSPGiwnJZqSS3hr2LyAN/Q/FnY8jODA U+5iIDVIhPlHOFkIlMpFoA6UVZqBY1IduxoSGug= ) ; I want to check this record vvvvvvvvvvvvv CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 842 IN NSEC3 1 1 0 - ( ; so I copy the highlighted bit ^^^^^^^^^^^^^ CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM ) $ NSEC3 1 1 0 - com com NSEC3 1 1 0 - CK0POJMG874LJREF7EFN8430QVIT8BSM Tony. -- f.anthony.n.finch http://dotat.at/ - I xn--zr8h punycode Lundy, Fastnet, Irish Sea: South or southwest, veering west for a time, 5 to 7, decreasing 4 at times. Moderate or rough, occasionally slight. Rain or thundery showers. Moderate or good, occasionally poor.