Pelajaran modul (3/3)
QNAME minimisation
QNAME minimisation
Without minimisation, a recursive resolver may send the full requested name to multiple servers as it walks the DNS hierarchy. QNAME minimisation limits each step to the part of the name needed to find the next delegation. The root may need to see the TLD, for example, but not the full host name.
This reduces unnecessary disclosure to authorities that do not need the full query. It does not hide the name from the recursive resolver, and it is not encryption. Implementations must handle older or unusual servers carefully, so minimisation behavior can vary.
Think of it as giving each directory only the next folder name it needs, rather than the full private address. Combine it with encrypted client-to-resolver transport when that fits the environment.
Check your understanding
Choose the best answer. This quiz runs locally and sends no DNS queries to real domains.
What does QNAME minimisation reduce?