NSEC3merkintöjä

NSEC3merkintöjä is a DNSSEC-related record type. It is part of the mechanisms used to secure the Domain Name System (DNS) against spoofing and cache poisoning attacks. Specifically, NSEC3 records are used to prove the non-existence of a DNS record. This is done without exposing all the other record names in a zone, which was a drawback of the earlier NSEC record type.

The "NSEC3" stands for Next Secure 3. It works by hashing the names of the DNS records within a zone. These hashed names are then published in NSEC3 records. When a resolver needs to prove that a specific domain name does not exist, it queries for the NSEC3 record that would alphabetically precede the hashed name of the requested domain. If the response contains a hash that comes after the requested hashed name, and there are no other NSEC3 records between them, it proves that no such record exists in the zone.

The "merkintöjä" part of the name is Finnish for "notes" or "records." This suggests that the term might have originated or is commonly used within a Finnish-speaking context, possibly in documentation or discussions about DNSSEC implementation. While NSEC3 is a standardized DNSSEC record type, the specific phrasing "NSEC3merkintöjä" points to a localized usage or naming convention. The core functionality remains that of the NSEC3 record, facilitating authenticated denial of existence in DNSSEC.