Next Secure (NSEC)

The NSEC RR is part of the DNSSEC (DNSSEC.bis) standard. The NSEC RR points to the next valid name in the zone file and is used to provide proof of non-existense of any name within a zone. The last NSEC in a zone will point back to the zone root or apex. NSEC RRs are created using the dnssec-signzone utility supplied with BIND.

One day real soon now™

Pro DNS and BIND by Ron Aitchison

Contents

tech info
guides home
dns articles
intro
contents
1 objectives
big picture
2 concepts
3 reverse map
4 dns types
quickstart
5 install bind
6 samples
reference
7 named.conf
8 dns records
operations
9 howtos
10 tools
11 trouble
programming
12 bind api's
security
13 dns security
bits & bytes
15 messages
resources
notes & tips
registration FAQ
dns resources
dns rfc's
change log