rfc9824v5.txt   rfc9824.txt 
Internet Engineering Task Force (IETF) S. Huque Internet Engineering Task Force (IETF) S. Huque
Request for Comments: 9824 Salesforce Request for Comments: 9824 Salesforce
Updates: 4034, 4035 C. Elmerot Updates: 4034, 4035 C. Elmerot
Category: Standards Track Cloudflare Category: Standards Track Cloudflare
ISSN: 2070-1721 O. Gudmundsson ISSN: 2070-1721 O. Gudmundsson
August 2025 September 2025
Compact Denial of Existence in DNSSEC Compact Denial of Existence in DNSSEC
Abstract Abstract
This document describes a technique to generate a signed DNS response This document describes a technique to generate a signed DNS response
on demand for a nonexistent name by claiming that the name exists but on demand for a nonexistent name by claiming that the name exists but
doesn't have any data for the queried record type. Such responses doesn't have any data for the queried record type. Such responses
require only one minimally covering NSEC or NSEC3 record, allow require only one minimally covering NSEC or NSEC3 record, allow
online signing servers to minimize signing operations and response online signing servers to minimize signing operations and response
 End of changes. 1 change blocks. 
1 lines changed or deleted 1 lines changed or added

This html diff was produced by rfcdiff 1.48.