## page was renamed from DNSSEC/Opt-Out
DNSSEC/Opt-Outについて、ここに記述してください。

NANG51 tutorial より
----
== Opt-Out ==
 * Standard DNSSEC:
   *  Every name in a zone has an NSEC
   *  Including delegations (NS records)
 *  Opt-Out DNSSEC:
   *  Only secure delegations have an NSEC
     *  I.e., delegations to zones that are themselves signed
Better for large zones like .com
{{{
Many names, but few secure delegations
Shorter NSEC3 chain
Fewer signatures
Smaller signed zone
}}}