Question re prevention of enumeration with DNSSEC (NSEC3, etc.)

Sat May 7 19:15:31 UTC 2022

For some reason NANOG is quoting my original reply in base64 encoding. I did not specify that on my end, so I’m not sure what is going on here.

  -mel

> On May 7, 2022, at 12:08 PM, Mel Beckman <mel at beckman.org> wrote:
> 
> --_000_D1647C55C4B34117851B3D01FD4CAC89beckmanorg_
> Content-Type: text/plain; charset="utf-8"
> Content-Transfer-Encoding: base64
> 
> QWN0dWFsbHksIHRoYXQgc291cmNlIHF1b3RlcyB0aGUgRmVpc3QgZGVjaXNpb24uIFRoZSByZXN0
> IG9mIHRoZSBkaXNjdXNzaW9uIG1ha2VzIGl0IHByZXR0eSBjbGVhciB0aGF0IGRvbWFpbiByZWdp
> c3RyaWVzIGFyZSBub3QgY29weXJpZ2h0YWJsZS4NCg0K4oCcVGh1cywgYSBkYXRhYmFzZSBvZiB1
> bnByb3RlY3RhYmxlIHdvcmtzIChzdWNoIGFzIGJhc2ljIGZhY3RzKSBpcyBwcm90ZWN0ZWQgb25s
> eSBhcyBhIGNvbXBpbGF0aW9uLiBTaW5jZSB0aGUgdW5kZXJseWluZyBkYXRhIGlzIG5vdCBwcm90
> ZWN0ZWQsIFUuUy4gY29weXJpZ2h0IGxhdyBkb2VzIG5vdCBwcmV2ZW50IHRoZSBleHRyYWN0aW9u
> IG9mIHVucHJvdGVjdGVkIGRhdGEgZnJvbSBhbiBvdGhlcndpc2UgcHJvdGVjdGFibGUgZGF0YWJh
> c2UuIEluIHRoZSBleGFtcGxlIG9mIGEgZGF0YWJhc2Ugb2YgcHJlc2lkZW50aWFsIHF1b3RhdGlv
> bnMsIGl0IHdvdWxkIHRoZXJlZm9yZSBub3QgYmUgYSB2aW9sYXRpb24gb2YgY29weXJpZ2h0IGxh
> dyB0byBleHRyYWN0IChjb3B5KSBhIHF1b3RhdGlvbiBmcm9tIEdlb3JnZSBXYXNoaW5ndG9uIGZy
> b20gdGhlIGRhdGFiYXNlLiBPbiB0aGUgb3RoZXIgaGFuZCwgaXQgd291bGQgYmUgdmlvbGF0aW9u
> IHRvIGNvcHkgdGhlIGVudGlyZSBkYXRhYmFzZSwgYXMgbG9uZyBhcyB0aGUgZGF0YWJhc2UgbWV0
> IHRoZSBGZWlzdDxodHRwczovL2JpdGxhdy5jb20vY29weXJpZ2h0L2RhdGFiYXNlLmh0bWwjRmVp
> c3Q+IG9yaWdpbmFsaXR5IGFuZCBjcmVhdGl2aXR5IHJlcXVpcmVtZW50cy7igJ0NCg0KVGhlIGtl
> eSBwcm9ibGVtIGlzIHRoYXQgbm8gZG9tYWluIHJlZ2lzdHJ5IG1lZXRzIHRoZSBvcmlnaW5hbGl0
> eSBhbmQgY3JlYXRpdml0eSByZXF1aXJlbWVudHMgc2V0IGZvcnRoIGJ5IFNDT1RVUyBpbiBGZWlz
> dC4NCg0KSSBhbSBub3QgYSBsYXd5ZXIgZWl0aGVyLCBidXQgSSBoYXZlIGEgbG90IG9mIGluaXRp
> YWxzIGFmdGVyIG15IG5hbWUsIGp1c3QgbGlrZSBzb21lIGxhd3llcnMgdGhhdCBwb3N0IG9uIE5B
> Tk9HIDopDQoNCiAtbWVsIGJlY2ttYW4sIEFCQywgQUNNLCBERUYsIFBGTCwgTUVMLCBTRUwsIElG
> UiwgQSZQLCBYJlksIFFXRVJUWSwgQVNERkcsIE5BTk9HLGFuZCBTdC4gQW50aG9ueeKAmXMgRWxl
> bWVudGFyeSBTY2hvb2wgRGlwbG9tYQ0KDQpPbiBNYXkgNywgMjAyMiwgYXQgOTo1OCBBTSwgTmll
> bHMgQmFra2VyIDxuaWVscz1uYW5vZ0BiYWtrZXIubmV0PiB3cm90ZToNCg0K77u/KiBtZWxAYmVj
> a21hbi5vcmcgKE1lbCBCZWNrbWFuKSBbU2F0IDA3IE1heSAyMDIyLCAxODozOCBDRVNUXToNCkkg
> ZG9u4oCZdCB0aGluayBjb3B5cmlnaHQgY2FuIGVudGVyIGludG8gaXQsIGJ5IGRpbnQgb2YgdGhl
> IGZhY3QgdGhhdCByZWdpc3RyeSBkYXRhLCBiZWluZyBwdXJlbHkgZmFjdHVhbCBhbmQgcHVibGlj
> bHkgYXZhaWxhYmxlLCBjYW5ub3QgYmUgY29weXJpZ2h0ZWQuDQoNCkknbSBub3QgYSBsYXd5ZXIg
> bm9yIHByZXRlbmQgdG8gYmUgb25lIG9uIHRoZSBpbnRlcm5ldCBidXQgaHR0cHM6Ly9iaXRsYXcu
> Y29tL2NvcHlyaWdodC9kYXRhYmFzZS5odG1sIHByb3ZpZGVzIHNvbWUgbnVhbmNlIHRvIHRoYXQg
> c3RhdGVtZW50Lg0KDQoNCiAgIC0tIE5pZWxzLg0K
> 
> --_000_D1647C55C4B34117851B3D01FD4CAC89beckmanorg_
> Content-Type: text/html; charset="utf-8"
> Content-ID: <581BD3EFEBA32141BC633F11830431FF at beckman.org>
> Content-Transfer-Encoding: base64
> 
> PGh0bWw+PGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRl
> eHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8L2hlYWQ+DQo8Ym9keSBkaXI9ImF1dG8iPg0KQWN0
> dWFsbHksIHRoYXQgc291cmNlIHF1b3RlcyB0aGUgRmVpc3QgZGVjaXNpb24uIFRoZSByZXN0IG9m
> IHRoZSBkaXNjdXNzaW9uIG1ha2VzIGl0IHByZXR0eSBjbGVhciB0aGF0IGRvbWFpbiByZWdpc3Ry
> aWVzIGFyZSBub3QgY29weXJpZ2h0YWJsZS4mbmJzcDs8YnI+DQo8YnI+DQrigJw8c3BhbiBzdHls
> ZT0iY2FyZXQtY29sb3I6IHJnYig0MSwgNDEsIDQxKTsgY29sb3I6IHJnYig0MSwgNDEsIDQxKTsg
> Zm9udC1mYW1pbHk6ICZxdW90O09wZW4gU2FucyZxdW90Oywgc2Fucy1zZXJpZjsgZm9udC1zaXpl
> OiAxNXB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7Ij5UaHVzLCBhIGRh
> dGFiYXNlIG9mIHVucHJvdGVjdGFibGUgd29ya3MgKHN1Y2ggYXMgYmFzaWMgZmFjdHMpIGlzIHBy
> b3RlY3RlZCBvbmx5IGFzIGEgY29tcGlsYXRpb24uDQogU2luY2UgdGhlIHVuZGVybHlpbmcgZGF0
> YSBpcyBub3QgcHJvdGVjdGVkLCBVLlMuIGNvcHlyaWdodCBsYXcgZG9lcyBub3QgcHJldmVudCB0
> aGUgZXh0cmFjdGlvbiBvZiB1bnByb3RlY3RlZCBkYXRhIGZyb20gYW4gb3RoZXJ3aXNlIHByb3Rl
> Y3RhYmxlIGRhdGFiYXNlLiBJbiB0aGUgZXhhbXBsZSBvZiBhIGRhdGFiYXNlIG9mIHByZXNpZGVu
> dGlhbCBxdW90YXRpb25zLCBpdCB3b3VsZCB0aGVyZWZvcmUgbm90IGJlIGEgdmlvbGF0aW9uIG9m
> IGNvcHlyaWdodA0KIGxhdyB0byBleHRyYWN0IChjb3B5KSBhIHF1b3RhdGlvbiBmcm9tIEdlb3Jn
> ZSBXYXNoaW5ndG9uIGZyb20gdGhlIGRhdGFiYXNlLiBPbiB0aGUgb3RoZXIgaGFuZCwgaXQgd291
> bGQgYmUgdmlvbGF0aW9uIHRvIGNvcHkgdGhlIGVudGlyZSBkYXRhYmFzZSwgYXMgbG9uZyBhcyB0
> aGUgZGF0YWJhc2UgbWV0IHRoZSZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL2JpdGxhdy5j
> b20vY29weXJpZ2h0L2RhdGFiYXNlLmh0bWwjRmVpc3QiIHN0eWxlPSJib3gtc2l6aW5nOiBib3Jk
> ZXItYm94OyBtYXJnaW46IDBweDsgcGFkZGluZzogMHB4OyBib3JkZXI6IDBweDsgZm9udC1mYW1p
> bHk6ICZxdW90O09wZW4gU2FucyZxdW90Oywgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxNXB4OyBm
> b250LXN0cmV0Y2g6IGluaGVyaXQ7IGxpbmUtaGVpZ2h0OiBpbmhlcml0OyB2ZXJ0aWNhbC1hbGln
> bjogYmFzZWxpbmU7IGNvbG9yOiByZ2IoMzQsIDk0LCAxNTIpOyI+RmVpc3Q8L2E+PHNwYW4gc3R5
> bGU9ImNhcmV0LWNvbG9yOiByZ2IoNDEsIDQxLCA0MSk7IGNvbG9yOiByZ2IoNDEsIDQxLCA0MSk7
> IGZvbnQtZmFtaWx5OiAmcXVvdDtPcGVuIFNhbnMmcXVvdDssIHNhbnMtc2VyaWY7IGZvbnQtc2l6
> ZTogMTVweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+Jm5ic3A7b3Jp
> Z2luYWxpdHkNCiBhbmQgY3JlYXRpdml0eSByZXF1aXJlbWVudHMuPC9zcGFuPuKAnQ0KPGRpdj48
> YnI+DQo8L2Rpdj4NCjxkaXY+VGhlIGtleSBwcm9ibGVtIGlzIHRoYXQgbm8gZG9tYWluIHJlZ2lz
> dHJ5IG1lZXRzIHRoZSBvcmlnaW5hbGl0eSBhbmQgY3JlYXRpdml0eSByZXF1aXJlbWVudHMgc2V0
> IGZvcnRoIGJ5IFNDT1RVUyBpbiBGZWlzdC4mbmJzcDs8YnI+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0K
> PGRpdj5JIGFtIG5vdCBhIGxhd3llciBlaXRoZXIsIGJ1dCBJIGhhdmUgYSBsb3Qgb2YgaW5pdGlh
> bHMgYWZ0ZXIgbXkgbmFtZSwganVzdCBsaWtlIHNvbWUgbGF3eWVycyB0aGF0IHBvc3Qgb24gTkFO
> T0cgOik8L2Rpdj4NCjxkaXY+PGJyPg0KPGRpdiBkaXI9Imx0ciI+Jm5ic3A7LW1lbCBiZWNrbWFu
> LCBBQkMsIEFDTSwgREVGLCBQRkwsIE1FTCwgU0VMLCBJRlIsIEEmYW1wO1AsIFgmYW1wO1ksIFFX
> RVJUWSwgQVNERkcsIE5BTk9HLGFuZCBTdC4gQW50aG9ueeKAmXMgRWxlbWVudGFyeSBTY2hvb2wg
> RGlwbG9tYTwvZGl2Pg0KPGRpdiBkaXI9Imx0ciI+PGJyPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0
> ZSI+T24gTWF5IDcsIDIwMjIsIGF0IDk6NTggQU0sIE5pZWxzIEJha2tlciAmbHQ7bmllbHM9bmFu
> b2dAYmFra2VyLm5ldCZndDsgd3JvdGU6PGJyPg0KPGJyPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+
> DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIj4NCjxkaXYgZGlyPSJsdHIiPu+7vzxzcGFuPiogbWVs
> QGJlY2ttYW4ub3JnIChNZWwgQmVja21hbikgW1NhdCAwNyBNYXkgMjAyMiwgMTg6MzggQ0VTVF06
> PC9zcGFuPjxicj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPjxzcGFuPkkgZG9u4oCZdCB0aGlu
> ayBjb3B5cmlnaHQgY2FuIGVudGVyIGludG8gaXQsIGJ5IGRpbnQgb2YgdGhlIGZhY3QgdGhhdCBy
> ZWdpc3RyeSBkYXRhLCBiZWluZyBwdXJlbHkgZmFjdHVhbCBhbmQgcHVibGljbHkgYXZhaWxhYmxl
> LCBjYW5ub3QgYmUgY29weXJpZ2h0ZWQuPC9zcGFuPjxicj4NCjwvYmxvY2txdW90ZT4NCjxzcGFu
> Pjwvc3Bhbj48YnI+DQo8c3Bhbj5JJ20gbm90IGEgbGF3eWVyIG5vciBwcmV0ZW5kIHRvIGJlIG9u
> ZSBvbiB0aGUgaW50ZXJuZXQgYnV0IGh0dHBzOi8vYml0bGF3LmNvbS9jb3B5cmlnaHQvZGF0YWJh
> c2UuaHRtbCBwcm92aWRlcyBzb21lIG51YW5jZSB0byB0aGF0IHN0YXRlbWVudC48L3NwYW4+PGJy
> Pg0KPHNwYW4+PC9zcGFuPjxicj4NCjxzcGFuPjwvc3Bhbj48YnI+DQo8c3Bhbj4mbmJzcDsgJm5i
> c3A7LS0gTmllbHMuPC9zcGFuPjxicj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8
> L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg==
> 
> --_000_D1647C55C4B34117851B3D01FD4CAC89beckmanorg_--