DNSSEC NSEC2 Owner and RDATA Format

Document Type Expired Internet-Draft (individual)
Last updated 2004-12-09
Stream (None)
Intended RFC status (None)
Expired & archived
plain text pdf html bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


The DNS Security (DNSSEC) NSEC resource record (RR) is intended to be used to provide authenticated denial of existence of DNS owner names and types; however, it also permits any user to obtain a listing of all DNS owner names in a zone. This can accomplished via successive DNS queries for all NSEC RRs in that zone.


Ben Laurie (ben@algroup.co.uk)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)