Subject: heads up for NSEC3 software implementers

From: [email-masked]
Date: Tue, 19 Feb 2008 12:38:52 +0000

This is a heads up for implementers of software that contain DNSSEC 
functions for signing and validating NSEC3 zones.

During the various tests we used the provisional DNS Security Algorithm 
Numbers 131 and 133 for respectively DSA-NSEC3-SHA1 and 
RSASHA1-NSEC3-SHA1.

The IANA has assigned DNS Security Algorithm Numbers 6 and 7 for 
respectively DSA-NSEC3-SHA1 and RSASHA1-NSEC3-SHA1. 

http://www.iana.org/assignments/dns-sec-alg-numbers

Please update your software.

Thanks,

Roy Arends
Nominet UK

PS. Though this seems a trivial change at some code-points, I do realize 
that folks need to test against (for instance) the example zone present in 
the appendix. I've attached the example zone in this mail. Feel free to 
ping me for additional test material or examples.