[Dnssec-deployment] "NSEC3 Hash Performance" by Yuri Schaeffer

[Paul Vixie]

seen on the iepg list today (thank you jaap!)

> http://www.nlnetlabs.nl/downloads/publications/nsec3_hash_performance.pdf
> 
> 	When signing a zone with DNSSEC and NSEC3, a choice has to be made
> 	for the key size and the number of hash iterations.  We have
> 	measured the effect of the number of hash iterations in NSEC3 in
> 	terms of maximum query load using NSD and Unbound. This document
> 	presents the results of these measurements and compares the cost
> 	for validating and authoritative name servers and allows for an
> 	educated choice for these parameters.