Skip to main content
DNSSEC

NSEC3 record

Definition, context, related terminology, and source references for NSEC3 record.

Definition

A hashed denial-of-existence record designed to make straightforward zone enumeration more difficult than NSEC. It adds iterations, salt, and opt-out behavior, with operational and computational tradeoffs.