NSEC or NSEC3 White-lies & Opt-out

[salmanshafi404]

Can you add white-lies & opt-out feature add plan in future? white-lies benifical for prevent sub domain leak & opt-out benifical for large zones that have too many unsigned sub domains.

[ShreyasZare]

Thanks for asking. The "white-lies" is already planned to be implemented together with online signing support. This is planned to be done after the clustering feature is available since online signing requires all name servers to hold the signing keys and the clustering support will help with that.

The NSEC3 opt-out support is not planned since its really required only for TLD zones. There are some TLDs that do not even use the opt-out feature. So, its really not something that is necessary to be supported for zones running on Technitium DNS server.