Post #3889002

RFC 4034 defines the wire format for the DNS RR type DNSKEY Bits 16-23 (aka byte 3) are defined by the RFC as the protocol field, which contains the value 3 This is not the value of the protocol when it was published, or a constant that is expected to change. The protocol field contains the value 32.1.2. The Protocol Field The Protocol Field MUST have value 3, and the DNSKEY RR MUST be treated as invalid during signature verification if it is found to be some value other than 3.