零知识 DNS
Embed This Widget
Add the script tag and a data attribute to embed this widget.
Embed via iframe for maximum compatibility.
<iframe src="https://tldfyi.com/iframe/glossary/zero-knowledge-dns/" width="420" height="400" frameborder="0" style="border:0;border-radius:10px;max-width:100%" loading="lazy"></iframe>Paste this URL in WordPress, Medium, or any oEmbed-compatible platform.
https://tldfyi.com/glossary/zero-knowledge-dns/Add a dynamic SVG badge to your README or docs.
[](https://tldfyi.com/glossary/zero-knowledge-dns/)Use the native HTML custom element.
零知识 DNS（ZK-DNS）是指将零知识证明（ZKP）密码学应用于域名系统，使一方能够在不泄露底层数据的情况下证明 DNS 记录的有效性或域名所有权。在 [[dnssec|DNSSEC]] 场景中，基于 ZK 的方法可以在不暴露签名名称完整列表的情况下证明某名称不存在（存在否认），解决了传统 DNSSEC NSEC 记录存在的区域枚举隐私问题。在 Web3 场景中，零知识证明被探索用于 [[blockchain-domain|区块链域名]] 的私密所有权转让和保密的 [[decentralized-dns|去中心化 DNS]] 查询。
示例
A DNSSEC-signed zone uses a ZK-based NSEC replacement so that a resolver can verify that 'secret.example.com' does not exist without the nameserver revealing any other zone contents, preventing zone-walking attacks.