API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 4641
[SUPERSEDED]

DNSSEC Operational Practices

Metadata

Publisher
IETF
Doc Type
Informational
Pages
35
Abstract
This document describes a set of practices for operating the DNS with security extensions (DNSSEC). The target audience is zone administrators deploying DNSSEC. The document discusses operational aspects of using keys and signatures in the DNS. It discusses issues of key generation, key storage, signature generation, key rollover, and related policies. This document obsoletes RFC 2541, as it covers more operational ground and gives more up-to-date requirements with respect to key sizes and the new DNSSEC specification. This memo provides information for the Internet community.
Publication Date
2006-09-01
Status Note
Informational
DOI
10.17487/RFC4641
Link
https://doi.org/10.17487/RFC4641
Author(s)
Olaf Kolkman
R. (Miek) Gieben
Keyword(s)
DNS, DNSSEC, DNS-SOC, Cryptography, Resource Records
Latest version of IETF RFC 4641

Document Versions — IETF RFC 4641

  • ▶ IETF RFC 4641 (2006-09-01)
    THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

Normative Reference(s)

Bibliographic Reference(s)

  • ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
  • Rose, S., "NIST DNSSEC workshop notes", June 2001. EXTERNAL
  • Lenstra, A. and E. Verheul, "Selecting Cryptographic Key Sizes", The Journal of Cryptology 14 (255-293), 2001. EXTERNAL
  • Jansen, J., "Use of RSA/SHA-256 DNSKEY and RRSIG Resource Records in DNSSEC", Work in Progress, January 2006. EXTERNAL
  • IETF RFC 1995 [Active*]
  • IETF RFC 1996 [Active*]
  • IETF RFC 2119 [Active*]
  • IETF RFC 2308 [Active*]
  • IETF RFC 2541 [Superseded*]
  • IETF RFC 3007 [Active*]
  • IETF RFC 3766 [Active*]
  • IETF RFC 4086 [Active*]
  • RFC4310 — 15 EXTERNAL
  • IETF RFC 4366 [Superseded*]
  • RFC4509 — 20 EXTERNAL
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4641.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 4641, DNSSEC Operational Practices. Available at https://doi.org/10.17487/RFC4641
Snippet:
IETF RFC 4641, DNSSEC Operational Practices. Available at https://doi.org/10.17487/RFC4641

HTML (ISO 690 compliant)

Preview:
IETF RFC 4641, DNSSEC Operational Practices. Available at https://doi.org/10.17487/RFC4641
Snippet:
<span class="citation"><cite>IETF RFC 4641</cite>, DNSSEC Operational Practices. Available at <a href="https://doi.org/10.17487/RFC4641" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4641</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 4641, DNSSEC Operational Practices
doi: 10.17487/RFC4641
url: https://doi.org/10.17487/RFC4641
Snippet:
<li>
<cite id="bib-rfc4641">IETF RFC 4641</cite>, DNSSEC Operational Practices
<span class="doi">10.17487/RFC4641</span>
</li>

Referenced By