Name: draft-weiler-dnsext-dnssec-online-signing-00
Title: Minimally Covering NSEC Records and DNSSEC On-line Signing
State: Active
Authors: Samuel Weiler, Johan Ihren
Group: Individual Submissions (none)
Date: 2004-11-11
This document describes how to construct DNSSEC NSEC resource records that
cover a smaller range of names than called for by [-records]. By generating
and signing these records on demand, authoritative name servers can
effectively stop the disclosure of zone contents otherwise made possible by
walking the chain of NSEC records in a signed zone.
[sh-index] Back to list of manuals
|
| |
