DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 52
- Abstract
- The Domain Name System Security (DNSSEC) Extensions introduced the NSEC resource record (RR) for authenticated denial of existence. This document introduces an alternative resource record, NSEC3, which similarly provides authenticated denial of existence. However, it also provides measures against zone enumeration and permits gradual expansion of delegation-centric zones. [STANDARDS-TRACK]
- Publication Date
- 2008-03-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC5155- Link
- https://doi.org/10.17487/RFC5155
- Author(s)
- Ben LaurieGeoffrey SissonRoy ArendsDavid Blacka
- Keyword(s)
- DNS, NSEC, Resource Records, NSEC3
Latest version of IETF RFC 5155
Document Versions — IETF RFC 5155
-
▶ IETF RFC 5155 (2008-03-01)THIS DOC [ACTIVE] [LATEST VERSION]
Amended by:
- IETF RFC 6840 [Active*]
- IETF RFC 6944 [Superseded*]
- IETF RFC 9077 [Active*]
- IETF RFC 9157 [Active*]
- RFC9276 NOT IN REGISTRY
- IETF RFC 9905 [Active*]
Normative Reference(s)
- IETF RFC 1034 [Active*]
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2119 [Active*]
- IETF RFC 2136 [Active*]
- IETF RFC 2181 [Active*]
- IETF RFC 2308 [Active*]
- IETF RFC 2434 [Superseded*]
- IETF RFC 2929 [Superseded*]
- IETF RFC 3597 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4035 [Active*]
- IETF RFC 4648 [Active*]
Bibliographic Reference(s)
- Laurie, B., "DNSSEC NSEC2 Owner and RDATA Format" , Work in Progress, December 2004. EXTERNAL
- Josefsson, S., "Authenticating Denial of Existence in DNS with Minimum Disclosure", Work in Progress, July 2000. EXTERNAL
- IETF RFC 2672 [Superseded*]
- IETF RFC 2898 [Superseded*]
- IETF RFC 3833 [Active*]
- IETF RFC 4592 [Active*]
- RFC4956 — RFC4956 EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5155.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5155, DNS Security (DNSSEC) Hashed Authenticated Denial of Existence. Available at https://doi.org/10.17487/RFC5155
Snippet:
IETF RFC 5155, DNS Security (DNSSEC) Hashed Authenticated Denial of Existence. Available at https://doi.org/10.17487/RFC5155
HTML (ISO 690 compliant)
Preview:
IETF RFC 5155, DNS Security (DNSSEC) Hashed Authenticated Denial of Existence. Available at https://doi.org/10.17487/RFC5155
Snippet:
<span class="citation"><cite>IETF RFC 5155</cite>, DNS Security (DNSSEC) Hashed Authenticated Denial of Existence. Available at <a href="https://doi.org/10.17487/RFC5155" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5155</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5155, DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
doi: 10.17487/RFC5155
url: https://doi.org/10.17487/RFC5155
doi: 10.17487/RFC5155
url: https://doi.org/10.17487/RFC5155
Snippet:
<li> <cite id="bib-rfc5155">IETF RFC 5155</cite>, DNS Security (DNSSEC) Hashed Authenticated Denial of Existence <span class="doi">10.17487/RFC5155</span> </li>
Referenced By
- IETF RFC 5702 [Active*]
- IETF RFC 5933 [Active*]
- IETF RFC 5936 [Active*]
- IETF RFC 5966 [Superseded*]
- IETF RFC 6672 [Active*]
- IETF RFC 6781 [Active*]
- IETF RFC 6840 [Active*]
- IETF RFC 6944 [Superseded*]
- IETF RFC 7719 [Superseded*]
- IETF RFC 7766 [Active*]
- IETF RFC 8198 [Active*]
- IETF RFC 8499 [Superseded*]
- IETF RFC 8624 [Superseded*]
- IETF RFC 9077 [Active*]
- IETF RFC 9103 [Active*]
- IETF RFC 9157 [Active*]
- IETF RFC 9499 [Active*]
- IETF RFC 9824 [Active*]
- IETF RFC 9904 [Active*]
- IETF RFC 9905 [Active*]