[Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Could you say why it is eek?

On 02/15/2011 09:20 AM, Alex Dalitz wrote:
>> Yes, ods-kaspcheck validated the policy. Alex has committed a fix in trunk
>> (rev 4433) that fixes this.
>>
>> The signer bug is fixed in ldns, but that doesn't help OpenDNSSEC for now
>> of course. We decided to fix the enforcer such that it will make sure not
>> to accept policies that are not validated by ods-kaspcheck.
> 
> 
> Eek!
> 
> Has anybody tested this?
> 
> Thanks,
> 
> 
> Alex.
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJNWkLCAAoJEA8yVCPsQCW51fgH/jOLP9m9PtULtXy1BR44qy42
q01csZfnnSu71zafRsCkTw0PmvN9DZ1Ynkk8BQKKmS02cHPkPH8i38zFyRg13Ro6
GjfRDCTXpbwjttVtwTP6tMXslwuEpbrS2wlA08rgatWX/LxRWwdgOMneWQJpv5M2
PivFWbC+s2lwyB8EaN+avbHTPOtsoHS62TEKz5dbZPi/mAJzNPMC8P8aCkrCbiww
GD1vE5GYciU1vDKZzo/nqNdIPd606y8QOtN2FElfdx/SYMVXZtuOCXcHn8UzHCxm
bUON5UvxxqVxquefqn2vI8qq6jjM2bfUwuVlg239b6zYuiID5g8F1uZWweXGNHk=
=mMCO
-----END PGP SIGNATURE-----