Query Regarding NSEC RR in DNSSEC

[Gaurav kansal]

Dear Team,

 

We have a Authenticated Response in DNSSEC through trust chain.

Now my question is why we itself need a NSEC when we get response from
DNSSEC enabled server authentically.

 

Means, if a Record exist in DNSSEC, then it replies the answer along with
RRSIG of that RR. 

AND if domain doesn't exist, then it can simply give NXDOMAIN and our job
will be done as we trust that nameserver through trust chain.

So what's the need of NSEC??????

 

Thanks n Regards, 
GAURAV KANSAL 
9910118448 
VoIP - 6259 
Operation And Routing Unit 
NIC , NEW DELHI 

 

Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth. 
IPv4 is Over,

Are your ready for new Network.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120214/6bff8dc9/attachment.html>