A New Internet-Draft is available from the on-line Internet-Drafts directories.
Title : DNS Security (DNSSEC) Authenticated Denial of Existence
Author(s) : R. (Miek) Gieben
W. (Matthijs) Mekking
Filename : draft-gieben-nsec4-01.txt
Pages : 35
Date : 2012-07-04
Abstract:
The Domain Name System Security (DNSSEC) Extensions introduced the
NSEC resource record for authenticated denial of existence, and the
NSEC3 resource record for hashed authenticated denial of existence.
This document introduces an alternative resource record, NSEC4, which
similarly provides authenticated denial of existence. It permits
gradual expansion of delegation-centric zones, just like NSEC3 does.
With NSEC4 it is possible, but not required, to provide measures
against zone enumeration.
NSEC4 reduces the size of the denial of existence response and adds
Opt-Out to unhashed names.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-gieben-nsec4
There's also a htmlized version available at:
http://tools.ietf.org/html/draft-gieben-nsec4-01
A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=draft-gieben-nsec4-01
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
