Re: Authenticated denial of existence...

Hi,

FYI, Miek and I posted a new version of this document which diff is very
small compared to -04.

Best regards,
  Matthijs


Changelog:
   1.  Minor fixes and adjustments.

URL:

http://www.ietf.org/internet-drafts/draft-gieben-auth-denial-of-existence-dns-05.txt

Diff:

http://www.ietf.org/rfcdiff?url2=draft-gieben-auth-denial-of-existence-dns-05

Abstract:
   Authenticated denial of existence allows a resolver to validate that
   a certain domain name does not exist.  It is also used to signal that
   a domain name exists, but does not have the specific RR type you were
   asking for.  When returning a negative DNSSEC response, a name server
   usually includes up to two NSEC records.  With NSEC3 this amount is
   three.

   This document provides additional background commentary and some
   context for the NSEC and NSEC3 mechanisms used by DNSSEC to provide
   authenticated denial of existence responses.
_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext