%% You should probably cite rfc4956 instead of this I-D. @techreport{ietf-dnsext-dnssec-opt-in-09, number = {draft-ietf-dnsext-dnssec-opt-in-09}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-dnsext-dnssec-opt-in/09/}, author = {Mark Kosters and Roy Arends and David Blacka}, title = {{DNS Security (DNSSEC) Opt-In}}, pagetotal = 17, year = 2006, month = jun, day = 22, abstract = {In the DNS security (DNSSEC) extensions, delegations to unsigned subzones are cryptographically secured. Maintaining this cryptography is not always practical or necessary. This document describes an experimental "Opt-In" model that allows administrators to omit this cryptography and manage the cost of adopting DNSSEC with large zones. This memo defines an Experimental Protocol for the Internet community.}, }