Question re prevention of enumeration with DNSSEC (NSEC3, etc.)

John Levine johnl at
Tue May 10 02:58:06 UTC 2022

It appears that Ray Bellis <ray at> said:
>> Is there any case law where someone has asserted a database right for a DNS zone?
>> It seems like a rather stupid thing to do. If someone asserted such a
>> right, I would make sure not to infringe it by ensuring no entries
>> from that database entered my DNS caches or other software.
>It wasn’t the zone itself as such - the concern was use of enumerated zone data to then perform bulk collection of Whois data.

It's perfectly reasonable to claim a database right in the WHOIS data,
but the offense is scraping WHOIS, not enumerating the DNS zone.

I could enumerate the DNS zone twice a day every day and so long as I stayed
away from WHOIS, nobody would notice or care.


More information about the NANOG mailing list