[Opendnssec-develop] Empty non terminals: 212 unjustified NSEC3s in .nl zone

[Roy Arends]

Antoin Verschuren wrote on 01/27/2010 09:15:46 AM:

> Hi Guys,
> 
> We may have found one of the reasons why signing .nl is slow.
> There are 212 delegations in our zone with corresponding glue which 
> have the following form in our .nl zone:
> 
> $ORIGIN nl.
> telemena                NS      a.ns.telemena
>                         NS      b.ns.telemena
> $ORIGIN ns.telemena.nl.
> a                       A       81.171.4.1
> b                       A       81.171.1.3
> 
> The signer sees these delegations and glue as empty non terminals, 
> and NSEC3s the data.

That's indeed superfluous. It doesn't actually hurt in a protocol sense, 
but it influences performance negatively. This needs to be fixed.
 
Roy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20100127/aaea7f94/attachment.htm>