Re: [DNSOP] Incremental zone hash - XHASH

Mark Andrews <marka@isc.org> Fri, 20 July 2018 14:32 UTC

Return-Path: <marka@isc.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B82FC130E11 for <dnsop@ietfa.amsl.com>; Fri, 20 Jul 2018 07:32:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.9
X-Spam-Level:
X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xQmndeEH7Xc0 for <dnsop@ietfa.amsl.com>; Fri, 20 Jul 2018 07:32:41 -0700 (PDT)
Received: from mx.pao1.isc.org (mx.pao1.isc.org [IPv6:2001:4f8:0:2::2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4851B130E2E for <dnsop@ietf.org>; Fri, 20 Jul 2018 07:32:41 -0700 (PDT)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id 375B33AB063 for <dnsop@ietf.org>; Fri, 20 Jul 2018 14:32:41 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id 295BD160090 for <dnsop@ietf.org>; Fri, 20 Jul 2018 14:32:41 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 1C89D16008F for <dnsop@ietf.org>; Fri, 20 Jul 2018 14:32:41 +0000 (UTC)
Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id WdmKsy8i626r for <dnsop@ietf.org>; Fri, 20 Jul 2018 14:32:41 +0000 (UTC)
Received: from dhcp-9bec.meeting.ietf.org (dhcp-9bec.meeting.ietf.org [31.133.155.236]) by zmx1.isc.org (Postfix) with ESMTPSA id D5A70160048 for <dnsop@ietf.org>; Fri, 20 Jul 2018 14:32:40 +0000 (UTC)
From: Mark Andrews <marka@isc.org>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Date: Sat, 21 Jul 2018 00:32:39 +1000
References: <FA63BBB1-5AB1-4494-85A9-B43CB2A04F89@isc.org>
To: dnsop WG <dnsop@ietf.org>
In-Reply-To: <FA63BBB1-5AB1-4494-85A9-B43CB2A04F89@isc.org>
Message-Id: <0DE2EE00-DF58-47B6-B112-18A3BA475016@isc.org>
X-Mailer: Apple Mail (2.3445.9.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/kzGkeC-9j4m7ImAAsf8TcpICT5o>
Subject: Re: [DNSOP] Incremental zone hash - XHASH
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2018 14:32:45 -0000


The same zone NSEC3 signed with a.example.com in OPTOUT range

	example.com SOA
	example.com NS ns.example.com
	example.com DNSKEY …
	example.com NSEC3PARAM 1 0 0 -
	example.com XHASH …
        3QNILC4QRC2P5CRN7JGVB5S3BPG0SHUV.example.com 1 1 0 - NSEC3 1 1 0 - ONIB9MGUB9H0RML3CDF5BGRJ59DKJHVK.example.com NS RRSIG XHASH
	a.example.com NS ns.a.example.com
	ns.a.example.com A …

	b.example.com NS ns.b.example.com
	b.example.com XHASH …
	ns.b.example.com A …

	ns.example.com A …
	ns.example.com AAAA …
	ns.example.com XHASH …
	ONIB9MGUB9H0RML3CDF5BGRJ59DKJHVK.example.com NSEC3 1 1 0 - PTJ67J96LVVVBU5K3V6N10B6QMO17275 NS SOA RRSIG DNSKEY NSEC3PARAM XHASH
	PTJ67J96LVVVBU5K3V6N10B6QMO17275.example.com NSEC 1 1 0 - 3QNILC4QRC2P5CRN7JGVB5S3BPG0SHUV.example.com A AAAA RRSIG XHASH

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka@isc.org