mirror of
https://github.com/rkivalin/certforge.git
synced 2026-10-13 08:00:43 +00:00
BIND 9.18+ truncates HMAC-SHA-512 MACs by default, and hickory-dns does not support verifying truncated HMACs. Document the workaround (use hmac-sha256) and add hmac-sha384 as an additional option. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>