Definition
A flag allowing NSEC3 chains in delegation-heavy zones to omit some unsigned delegations. It reduces signing cost but changes the security proof around insecure delegations.
DNSSEC
NSEC3 opt-out
Definition, context, related terminology, and source references for NSEC3 opt-out.