4 ms·
I believe so: http://dankaminsky.com/2011/01/05/djb-ccc/#whitelies http://dankaminsky.com/2011/01/05/djb-ccc/#whitelies (Phreebird is an online signer, but I d
by indolering 11y ago
I believe so: http://dankaminsky.com/2011/01/05/djb-ccc/#whitelies http://dankaminsky.com/2011/01/05/djb-ccc/#whitelies
(Phreebird is an online signer, but I don't see why an offline signer couldn't generate these proofs.)
- tptacek 11y agoBecause you can't predict offline which names you need to obscure with fake NSEC records. If there is any company in the world actually using Phreebird in production, I'd --- for more than one reason --- like to know about it.
- Habbie 11y agoI don't know of any either, but there are plenty running PowerDNS in online 'white lies' signing mode. And then, of course, there is Cloudflare. (And indeed, it cannot be done offline - although doing much narrower NSEC/NSEC3 ranges than 'normal' could be done offline).