[Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records

[Alex Dalitz]

> Yes, ods-kaspcheck validated the policy. Alex has committed a fix in trunk
> (rev 4433) that fixes this.
> 
> The signer bug is fixed in ldns, but that doesn't help OpenDNSSEC for now
> of course. We decided to fix the enforcer such that it will make sure not
> to accept policies that are not validated by ods-kaspcheck.


Eek!

Has anybody tested this?

Thanks,


Alex.