DNSSEC-Tools being migrated -- expect broken links.
The process to convert older wiki pages to our new site is not yet complete; please be patient while we work through the moving process. -- 2018-08-11

NSEC3

About NSEC3

About NSEC3. NSEC3 is an alternate version of NSEC proof of non-existence. A side effect of NSEC records is that a zone can be traversed from one end to the other and every record can be discovered. NSEC3, defined in solves this by publishing only hash records of zone names.

DNSSEC-Tools support for NSEC3

DNSSEC-Tools support for NSEC3. NSEC3 support is first available for zonesigner and donuts in version 1.5 of the DNSSEC-Tools release. It requires bind 9.6 in order for the functionality to work.