Defines NSEC3, an alternative to NSEC for authenticated denial of existence in DNSSEC that prevents zone enumeration by hashing domain names.
This document defines the NSEC3 and NSEC3PARAM resource records for DNSSEC.
The DNS Security (DNSSEC) Hashed Authenticated Denial of Existence mechanism described in this document uses a new NSEC3 resource record that uses a cryptographic hash of the owner name to prevent zone enumeration.