Add RFC 5155 DNSSEC RR Type Support (NSEC3, NSEC3PARAM)

did:plc:adtzorbhmmjbzxsl2y4vqlqs opened this Apr 2, 2026 0 comments
did:plc:adtzorbhmmjbzxsl2y4vqlqs opened Apr 2, 2026

Add encoding and decoding support for hashed denial-of-existence DNSSEC Resource Record types defined in RFC 5155.

  • NSEC3 (TYPE=50): Parse/generate RDATA including Hash Algorithm, Flags, Iterations, Salt, Next Hashed Owner Name, Type Bit Maps.
  • NSEC3PARAM (TYPE=51): Parse/generate RDATA including Hash Algorithm, Flags, Iterations, Salt.
  • Requires handling specific hashing and base32hex encoding/decoding aspects within the RDATA logic.

No activity yet.

cospan · schematic version control on atproto built on AT Protocol