Minimally Covering NSEC Records and DNSSEC On-line Signing
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 8
- Abstract
- This document describes how to construct DNSSEC NSEC resource records that cover a smaller range of names than called for by RFC 4034. By generating and signing these records on demand, authoritative name servers can effectively stop the disclosure of zone contents otherwise made possible by walking the chain of NSEC records in a signed zone. [STANDARDS-TRACK]
- Publication Date
- 2006-04-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC4470- Link
- https://doi.org/10.17487/RFC4470
- Author(s)
- Sam WeilerJohan Stenstam
- Keyword(s)
- DNSSEC, DNS
Latest version of IETF RFC 4470
Document Versions — IETF RFC 4470
-
▶ IETF RFC 4470 (2006-04-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4035 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC4470.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 4470, Minimally Covering NSEC Records and DNSSEC On-line Signing. Available at https://doi.org/10.17487/RFC4470
Snippet:
IETF RFC 4470, Minimally Covering NSEC Records and DNSSEC On-line Signing. Available at https://doi.org/10.17487/RFC4470
HTML (ISO 690 compliant)
Preview:
IETF RFC 4470, Minimally Covering NSEC Records and DNSSEC On-line Signing. Available at https://doi.org/10.17487/RFC4470
Snippet:
<span class="citation"><cite>IETF RFC 4470</cite>, Minimally Covering NSEC Records and DNSSEC On-line Signing. Available at <a href="https://doi.org/10.17487/RFC4470" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4470</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 4470, Minimally Covering NSEC Records and DNSSEC On-line Signing
doi: 10.17487/RFC4470
url: https://doi.org/10.17487/RFC4470
doi: 10.17487/RFC4470
url: https://doi.org/10.17487/RFC4470
Snippet:
<li> <cite id="bib-rfc4470">IETF RFC 4470</cite>, Minimally Covering NSEC Records and DNSSEC On-line Signing <span class="doi">10.17487/RFC4470</span> </li>
Referenced By
- IETF RFC 9499 [Active*]
- IETF RFC 9824 [Active*]