DNSSEC NSEC2 Owner and RDATA Format

Document Type Expired Internet-Draft (individual)
Author Ben Laurie 
Last updated 2004-12-09
Stream (None)
Expired & archived
plain text pdf htmlized bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


The DNS Security (DNSSEC) NSEC resource record (RR) is intended to be used to provide authenticated denial of existence of DNS owner names and types; however, it also permits any user to obtain a listing of all DNS owner names in a zone. This can accomplished via successive DNS queries for all NSEC RRs in that zone.


Ben Laurie (ben@algroup.co.uk)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)