[Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records

Alex Dalitz AlexD at nominet.org.uk
Tue Feb 15 08:20:50 UTC 2011

> Yes, ods-kaspcheck validated the policy. Alex has committed a fix in trunk
> (rev 4433) that fixes this.
> The signer bug is fixed in ldns, but that doesn't help OpenDNSSEC for now
> of course. We decided to fix the enforcer such that it will make sure not
> to accept policies that are not validated by ods-kaspcheck.


Has anybody tested this?



More information about the Opendnssec-develop mailing list