Skip to main content
DNSSEC

Opt-out

Definition, context, related terminology, and source references for Opt-out.

Definition

A feature, most notably NSEC3 opt-out, that lets a signed delegation-centric zone omit some insecure delegations from the authenticated chain. It improves scalability but weakens proof granularity around those delegations.