DNS Security (DNSSEC) Opt-In

Metadata

Publisher: IETF
Doc Type: Experimental
Pages: 17
Abstract: In the DNS security (DNSSEC) extensions, delegations to unsigned subzones are cryptographically secured. Maintaining this cryptography is not always practical or necessary. This document describes an experimental "Opt-In" model that allows administrators to omit this cryptography and manage the cost of adopting DNSSEC with large zones. This memo defines an Experimental Protocol for the Internet community.
Publication Date: 2007-07-01
Status Note: Experimental
DOI: 10.17487/RFC4956
Link: https://doi.org/10.17487/RFC4956
Author(s): Roy Arends
Mark Kosters
David Blacka

Latest version of IETF RFC 4956

Document Versions — IETF RFC 4956

▶ IETF RFC 4956 (2007-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1035 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 3655 [Superseded*]
IETF RFC 4033 [Active*]
IETF RFC 4034 [Active*]
IETF RFC 4035 [Active*]
IETF RFC 4955 [Active*]

Bibliographic Reference(s)

IETF RFC 2181 [Active*]
IETF RFC 3007 [Active*]
IETF RFC 3090 [Superseded*]
IETF RFC 3225 [Active*]
IETF RFC 3833 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4956.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 4956, DNS Security (DNSSEC) Opt-In. Available at https://doi.org/10.17487/RFC4956

Snippet:

IETF RFC 4956, DNS Security (DNSSEC) Opt-In. Available at https://doi.org/10.17487/RFC4956

HTML (ISO 690 compliant)

Preview:

IETF RFC 4956, DNS Security (DNSSEC) Opt-In. Available at https://doi.org/10.17487/RFC4956

Snippet:

<span class="citation"><cite>IETF RFC 4956</cite>, DNS Security (DNSSEC) Opt-In. Available at <a href="https://doi.org/10.17487/RFC4956" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4956</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 4956, DNS Security (DNSSEC) Opt-In
doi: 10.17487/RFC4956
url: https://doi.org/10.17487/RFC4956

Snippet:

<li>
<cite id="bib-rfc4956">IETF RFC 4956</cite>, DNS Security (DNSSEC) Opt-In
<span class="doi">10.17487/RFC4956</span>
</li>

Referenced By

IETF RFC 5155 [Active*]
IETF RFC 7129 [Active*]
IETF RFC 7719 [Superseded*]
IETF RFC 8499 [Superseded*]
IETF RFC 9499 [Active*]