Skip to content

Commit 356c339

Browse files
authored
Add RFC reference to NSEC3 section in DNS Dev Docs
1 parent 6c738db commit 356c339

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/content/docs/dns/dnssec/enable-nsec3.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ sidebar:
88

99
import { APIRequest } from "~/components";
1010

11-
As explained in [our blog](https://blog.cloudflare.com/black-lies/), Cloudflare's implementation of negative answers with NSEC is protected against zone walking[^1]. This implementation removes the need for NSEC3 and has been [proposed as an IETF standard](https://datatracker.ietf.org/doc/draft-ietf-dnsop-compact-denial-of-existence/).
11+
As explained in [our blog](https://blog.cloudflare.com/black-lies/), Cloudflare's implementation of negative answers with NSEC is protected against zone walking[^1]. This implementation, also referred to as "Compact Denial of Existance" ([RFC 9824](https://datatracker.ietf.org/doc/rfc9824/)), removes the need for NSEC3 and is significantly more efficient.
1212

1313
However, if you must use NSEC3 for compliance reasons, you can enable it as explained below.
1414

0 commit comments

Comments
 (0)