Economical With The Truth: Making DNSSEC Answers Cheap

What this post added

This post details an optimization for DNSSEC negative answers (NXDOMAIN and NODATA) by reducing the number of records and signatures returned. It addresses the computational cost and potential information leakage associated with NSEC/NSEC3 records by proposing a more economical approach to proving non-existence, particularly for zones with dynamic record generation or key-value store backends.