Minimally Covering NSEC Records and DNSSEC On-line Signing
Minimally Covering NSEC Records and DNSSEC On-line Signing
复制标题
最低程度覆盖 NSEC 记录和 DNSSEC 在线签名
DOI:
--
复制
发表时间:
2006
期刊:
影响因子:
--
通讯作者:
J. Ihren
中科院分区:
文献类型:
--
作者:
Samuel Weiler;J. Ihren
This document describes how to construct DNSSEC NSEC resource records
that cover a smaller range of names than called for by RFC 4034. By
generating and signing these records on demand, authoritative name
servers can effectively stop the disclosure of zone contents otherwise
made possible by walking the chain of NSEC records in a signed zone.
[STANDARDS-TRACK]