Query Regarding NSEC RR in DNSSEC

Gaurav kansal gaurav.kansal at nic.in
Tue Feb 14 17:23:19 UTC 2012

Dear Team,


We have a Authenticated Response in DNSSEC through trust chain.

Now my question is why we itself need a NSEC when we get response from
DNSSEC enabled server authentically.


Means, if a Record exist in DNSSEC, then it replies the answer along with
RRSIG of that RR. 

AND if domain doesn't exist, then it can simply give NXDOMAIN and our job
will be done as we trust that nameserver through trust chain.

So what's the need of NSEC??????


Thanks n Regards, 
VoIP - 6259 
Operation And Routing Unit 


Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth. 
IPv4 is Over,

Are your ready for new Network.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120214/6bff8dc9/attachment.html>

More information about the bind-users mailing list