Aggressive use of DNSSEC-validated cache
A resolver optimization that reuses validated NSEC or NSEC3 proofs to synthesize negative answers for other names covered by the proof. This can reduce authoritative queries and improve resilience during random-subdomain attacks.