%% You should probably cite rfc4470 instead of this I-D. @techreport{ietf-dnsext-dnssec-online-signing-02, number = {draft-ietf-dnsext-dnssec-online-signing-02}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-dnsext-dnssec-online-signing/02/}, author = {Samuel Weiler and Johan Stenstam}, title = {{Minimally Covering NSEC Records and DNSSEC On-line Signing}}, pagetotal = 8, year = 2006, month = jan, day = 24, abstract = {This document describes how to construct DNSSEC NSEC resource records that cover a smaller range of names than called for by RFC 4034. By generating and signing these records on demand, authoritative name servers can effectively stop the disclosure of zone contents otherwise made possible by walking the chain of NSEC records in a signed zone. {[}STANDARDS-TRACK{]}}, }