{
  "$schema": "/api/schemas/documents.schema.json",
  "apiVersion": "1.1.0",
  "lastModified": "2026-10-20T16:07:14.301Z",
  "sourcePath": "src/main/data/docs",
  "docId": "RFC8078",
  "document": {
    "abstract": "RFC 7344 specifies how DNS trust can be maintained across key rollovers in-band between parent and child. This document elevates RFC 7344 from Informational to Standards Track. It also adds a method for initial trust setup and removal of a secure entry point. Changing a domain's DNSSEC status can be a complicated matter involving multiple unrelated parties. Some of these parties, such as the DNS operator, might not even be known by all the organizations involved. The inability to disable DNSSEC via in-band signaling is seen as a problem or liability that prevents some DNSSEC adoption at a large scale. This document adds a method for in-band signaling of these DNSSEC status changes. This document describes reasonable policies to ease deployment of the initial acceptance of new secure entry points (DS records). It is preferable that operators collaborate on the transfer or move of a domain. The best method is to perform a Key Signing Key (KSK) plus Zone Signing Key (ZSK) rollover. If that is not possible, the method using an unsigned intermediate state described in this document can be used to move the domain between two parties. This leaves the domain temporarily unsigned and vulnerable to DNS spoofing, but that is preferred over the alternative of validation failures due to a mismatched DS and DNSKEY record.",
    "abstract$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML abstract",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "authors": [
      {
        "name": "Ólafur Guðmundsson"
      },
      {
        "name": "Paul Wouters"
      }
    ],
    "authors$meta": {
      "confidence": "high",
      "note": "Parsed from Datatracker doc page article:author (profile full names)",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "docId": "RFC8078",
    "docId$meta": {
      "confidence": "high",
      "note": "Derived from RFC number or Datatracker identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "docLabel": "IETF RFC 8078",
    "docLabel$meta": {
      "confidence": "high",
      "note": "Constructed from provider and document identifier",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "docNumber": "8078",
    "docNumber$meta": {
      "confidence": "high",
      "note": "Parsed from RFC info page report metadata",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T16:07:14.301Z",
      "version": "extractDocs.js@commit:cc2368606b5f"
    },
    "docTitle": "Managing DS Records from the Parent via CDS/CDNSKEY",
    "docTitle$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML title",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "docType": "Standard",
    "docType$meta": {
      "confidence": "high",
      "note": "Mapped from Datatracker std_level or RFC status text",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "doi": "10.17487/RFC8078",
    "doi$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML doi",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "href": "https://doi.org/10.17487/RFC8078",
    "href$meta": {
      "confidence": "high",
      "note": "Derived from DOI (https://doi.org/<doi>)",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "keywords": [
      "DNSSEC",
      "Trust Maintenance"
    ],
    "keywords$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML keywords",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "pages": "10",
    "pages$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML page-count",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "publicationDate": "2017-03-01",
    "publicationDate$meta": {
      "confidence": "high",
      "note": "Parsed from RFC index XML date",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "publisher": "IETF",
    "publisher$meta": {
      "confidence": "high",
      "note": "Static: provider",
      "originalValue": null,
      "source": "parsed",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "references": {
      "bibliographic": [
        "RFC4398"
      ],
      "bibliographic$meta": {
        "confidence": "medium",
        "flag": "MIXED_REF_LAYOUT_RISK anchored=4 proseBlocks=7 skippedAnchorBlocks=5",
        "note": "Parsed from RFC HTML references/informative sections",
        "originalValue": [],
        "reviewRequired": true,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "normative": [
        "RFC2119",
        "RFC4034",
        "RFC7344"
      ],
      "normative$meta": {
        "confidence": "high",
        "note": "Parsed from RFC HTML normative references sections",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      }
    },
    "resolvedHref": "https://www.rfc-editor.org/info/rfc8078/",
    "resolvedHref$meta": {
      "confidence": "high",
      "note": "Final URL resolved via URL redirect verification",
      "originalValue": null,
      "source": "resolved",
      "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
      "updated": "2026-10-20T09:42:36.380Z",
      "version": "extractDocs.js@commit:6ff5f1bb34e3"
    },
    "status": {
      "active": true,
      "active$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "amendedBy": [
        "RFC9615"
      ],
      "amendedBy$meta": {
        "confidence": "high",
        "note": "Parsed from RFC index XML",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "amends": [
        "RFC7344"
      ],
      "amends$meta": {
        "confidence": "high",
        "note": "Parsed from RFC index XML",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "errataExist": true,
      "errataExist$meta": {
        "confidence": "high",
        "note": "Derived from presence of errata links on RFC/Datatracker pages",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "errataUrl": [
        "https://www.rfc-editor.org/errata/rfc8078",
        "https://www.rfc-editor.org/errata_search.php?rfc=8078",
        "https://www.rfc-editor.org/rfc/inline-errata/rfc8078.html"
      ],
      "errataUrl$meta": {
        "confidence": "high",
        "note": "Parsed from errata links on RFC/Datatracker pages",
        "originalValue": [],
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "latestVersion": true,
      "latestVersion$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "statusNote": "Proposed Standard",
      "statusNote$meta": {
        "confidence": "high",
        "note": "Mapped from Datatracker doc.json std_level",
        "originalValue": null,
        "source": "parsed",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      },
      "superseded": false,
      "superseded$meta": {
        "confidence": "high",
        "note": "Derived from supersession relationship fields",
        "originalValue": null,
        "source": "resolved",
        "sourceUrl": "https://www.rfc-editor.org/info/rfc8078/",
        "updated": "2026-10-20T09:42:36.380Z",
        "version": "extractDocs.js@commit:6ff5f1bb34e3"
      }
    }
  }
}