%% You should probably cite draft-ietf-dnsop-compact-denial-of-existence instead of this I-D. @techreport{huque-dnsop-compact-lies-01, number = {draft-huque-dnsop-compact-lies-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-huque-dnsop-compact-lies/01/}, author = {Shumon Huque and Christian Elmerot}, title = {{Compact Denial of Existence in DNSSEC}}, pagetotal = 8, year = 2023, month = mar, day = 3, abstract = {This document describes a technique to generate a signed DNS response on demand for a non-existent name by claiming that the name exists but doesn't have any data for the queried record type. Such answers require only one minimal NSEC record, allow online signing servers to minimize signing operations and response sizes, and prevent zone content disclosure.}, }