
Taking DNS for a walk
NSEC3 Prevalence and Recoverability Whitepaper
This paper presents a GPU-based attack on NSEC3 that recovered 44% of names for the internet’s top 20,000 NSEC3-protected DNS zones, partially invalidating NSEC3’s privacy and security goals.