Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 11
Abstract: Every DNS security-aware resolver must have at least one Trust Anchor to use as the basis for validating responses from DNS signed zones. For various reasons, most DNS security-aware resolvers are expected to have several Trust Anchors. For some operations, manual monitoring and updating of Trust Anchors may be feasible, but many operations will require automated methods for updating Trust Anchors in their security-aware resolvers. This document identifies the requirements that must be met by an automated DNS Trust Anchor rollover solution for security-aware DNS resolvers. This memo provides information for the Internet community.
Publication Date: 2007-08-01
Status Note: Informational
DOI: 10.17487/RFC4986
Link: https://doi.org/10.17487/RFC4986
Author(s): Howard Eland
Russ Mundy
Steve Crocker
Suresh Krishnaswamy
Keyword(s): DNS Signed Zone

Latest version of IETF RFC 4986

Document Versions — IETF RFC 4986

▶ IETF RFC 4986 (2007-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 3979 [Superseded*]
IETF RFC 4033 [Active*]
IETF RFC 4034 [Active*]
IETF RFC 4035 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4986.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 4986, Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover. Available at https://doi.org/10.17487/RFC4986

Snippet:

IETF RFC 4986, Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover. Available at https://doi.org/10.17487/RFC4986

HTML (ISO 690 compliant)

Preview:

IETF RFC 4986, Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover. Available at https://doi.org/10.17487/RFC4986

Snippet:

<span class="citation"><cite>IETF RFC 4986</cite>, Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover. Available at <a href="https://doi.org/10.17487/RFC4986" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4986</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 4986, Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover
doi: 10.17487/RFC4986
url: https://doi.org/10.17487/RFC4986

Snippet:

<li>
<cite id="bib-rfc4986">IETF RFC 4986</cite>, Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover
<span class="doi">10.17487/RFC4986</span>
</li>

Referenced By

IETF RFC 5011 [Active*]