Name: draft-gieben-bert-response-00
Title: Online Signing of Negative and Wildcard Responses
State: Active
Authors: R Gieben
Group: Individual Submissions (none)
Date: 2004-11-17
This draft contains a number of loose ends and does not include any text on
any (known) corner cases. Its primary goal is to document the choices the
DNSEXT working group has on the subject of fixing the NSEC enumeration in
DNSSEC. If at any point in time the working group feels this idea needs
further work, this draft will be updated. DNSSECbis [RFC LIST] allow for
zone enumeration by walking NSEC chains. It also has a large impact on the
zone size at the initial deployment stage. This draft proposes a method to
address these issues by the use of online signing of negative and wildcard
responses.
|
|
|