Primary-Secondary-Resolvers Membership Proof Systems and their Applications to DNSSEC Based on: NSEC5: Provably Preventing DNSSEC Zone Enumeration Sharon.
