Threat Analysis of the Domain Name System (DNS)
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 16
- Abstract
- Although the DNS Security Extensions (DNSSEC) have been under development for most of the last decade, the IETF has never written down the specific set of threats against which DNSSEC is designed to protect. Among other drawbacks, this cart-before-the-horse situation has made it difficult to determine whether DNSSEC meets its design goals, since its design goals are not well specified. This note attempts to document some of the known threats to the DNS, and, in doing so, attempts to measure to what extent (if any) DNSSEC is a useful tool in defending against these threats. This memo provides information for the Internet community.
- Publication Date
- 2004-08-01
- Status Note
- Informational
- DOI
10.17487/RFC3833- Link
- https://doi.org/10.17487/RFC3833
- Author(s)
- Derek AtkinsRob Austein
- Keyword(s)
- Security, Authentication
Latest version of IETF RFC 3833
Document Versions — IETF RFC 3833
-
▶ IETF RFC 3833 (2004-08-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1034 [Active*]
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 1123 [Active*]
- IETF RFC 2181 [Active*]
- IETF RFC 2308 [Active*]
- IETF RFC 2535 [Superseded*]
- IETF RFC 2671 [Superseded*]
- IETF RFC 2845 [Superseded*]
- IETF RFC 2930 [Active*]
- IETF RFC 3007 [Active*]
Bibliographic Reference(s)
- Bellovin, S., "Using the Domain Name System for System Break-Ins", Proceedings of the Fifth Usenix Unix Security Symposium, June 1995. EXTERNAL
- Vixie, P, "DNS and BIND Security Issues", Proceedings of the Fifth Usenix Unix Security Symposium, June 1995. EXTERNAL
- Schuba, C., "Addressing Weaknesses in the Domain Name System Protocol", Master's thesis, Purdue University Department of Computer Sciences, August 1993. EXTERNAL
- Design team meeting summary message posted to dns- security@tis.com mailing list by Jim Galvin on 19 November 1993. EXTERNAL
- IETF RFC 3552 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC3833.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 3833, Threat Analysis of the Domain Name System (DNS). Available at https://doi.org/10.17487/RFC3833
Snippet:
IETF RFC 3833, Threat Analysis of the Domain Name System (DNS). Available at https://doi.org/10.17487/RFC3833
HTML (ISO 690 compliant)
Preview:
IETF RFC 3833, Threat Analysis of the Domain Name System (DNS). Available at https://doi.org/10.17487/RFC3833
Snippet:
<span class="citation"><cite>IETF RFC 3833</cite>, Threat Analysis of the Domain Name System (DNS). Available at <a href="https://doi.org/10.17487/RFC3833" target="_blank" rel="noopener">https://doi.org/10.17487/RFC3833</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 3833, Threat Analysis of the Domain Name System (DNS)
doi: 10.17487/RFC3833
url: https://doi.org/10.17487/RFC3833
doi: 10.17487/RFC3833
url: https://doi.org/10.17487/RFC3833
Snippet:
<li> <cite id="bib-rfc3833">IETF RFC 3833</cite>, Threat Analysis of the Domain Name System (DNS) <span class="doi">10.17487/RFC3833</span> </li>
Referenced By
- IETF RFC 4033 [Active*]
- IETF RFC 4408 [Superseded*]
- IETF RFC 4870 [Superseded*]
- IETF RFC 4871 [Superseded*]
- IETF RFC 5222 [Active*]