NSEC 查询
查询 NSEC 记录以验证 DNSSEC 否定响应与区域覆盖
NSEC (Next Secure) records provide authenticated denial of existence in DNSSEC by creating a chain that covers all names in a zone, proving that queried names don't exist.
域名查询
输入域名,查询其 NSEC 记录
Query NSEC records to verify DNSSEC negative responses and zone coverage
查询 NSEC 记录以验证 DNSSEC 否定响应与区域覆盖
NSEC (Next Secure) records are a crucial component of DNSSEC that provide authenticated denial of existence. They prove that a particular domain name or record type does not exist in a DNS zone, preventing attackers from spoofing non-existent records.
NSEC:提供清晰的不存在证明,但允许区域遍历(枚举所有域名)。
NSEC3:使用哈希域名来防止区域遍历,同时仍然提供不存在证明。