Skip to main content
DNSSEC

Compact denial of existence

Definition, context, related terminology, and source references for Compact denial of existence.

Definition

A DNSSEC design that reduces or avoids the traditional zone-enumeration and response-size costs of NSEC or NSEC3 while still proving nonexistence. Specific mechanisms depend on the authoritative implementation and standards in use.