DNSSEC Operational Practices, Version 2

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 71
Abstract: This document describes a set of practices for operating the DNS with security extensions (DNSSEC). The target audience is zone administrators deploying DNSSEC. The document discusses operational aspects of using keys and signatures in the DNS. It discusses issues of key generation, key storage, signature generation, key rollover, and related policies. This document obsoletes RFC 4641, as it covers more operational ground and gives more up-to-date requirements with respect to key sizes and the DNSSEC operations.
Publication Date: 2012-12-01
Status Note: Informational
DOI: 10.17487/RFC6781
Link: https://doi.org/10.17487/RFC6781
Author(s): Olaf Kolkman
Matthijs Mekking
R. (Miek) Gieben
Keyword(s): DNSSEC, Key Rollover

Latest version of IETF RFC 6781

Document Versions — IETF RFC 6781

▶ IETF RFC 6781 (2012-12-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1034 [Active*]
IETF RFC 1035 [Active, Amended*]
IETF RFC 4033 [Active*]
IETF RFC 4034 [Active*]
IETF RFC 4035 [Active*]
RFC4509 — 20 EXTERNAL
RFC5155 — RFC5155 EXTERNAL
RFC5702 — RFC5702 EXTERNAL

Bibliographic Reference(s)

NIST.SP.800-90A — NIST-SP-800-90A EXTERNAL
Morris, S., Ihren, J., and J. Dickinson, "DNSSEC Key Timing Considerations", Work in Progress, July 2012. EXTERNAL
Schaeffer, Y., "NSEC3 Hash Performance", NLnet Labs document 2010-002, March 2010. EXTERNAL
Larson, M. and O. Gudmundsson, "DNSSEC Trust Anchor Configuration and Maintenance", Work in Progress, October 2010. EXTERNAL
Ljunggren, F., Eklund Lowinder, AM., and T. Okubo, "A Framework for DNSSEC Policies and DNSSEC Practice Statements", Work in Progress, November 2012. EXTERNAL
Rose, S., "NIST DNSSEC workshop notes", July 2001, < http://www.ietf.org/mail-archive/web/dnsop/current/ msg01020.html >. EXTERNAL
IETF RFC 1995 [Active*]
IETF RFC 1996 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 2308 [Active*]
IETF RFC 3007 [Active*]
IETF RFC 3375 [Active*]
IETF RFC 3766 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 4641 [Superseded*]
IETF RFC 4949 [Active*]
RFC5011 — RFC5011 EXTERNAL
IETF RFC 5246 [Superseded*]
RFC5910 — RFC5910 EXTERNAL
RFC5933 — RFC5933 EXTERNAL
RFC6605 — RFC6605 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6781.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6781, DNSSEC Operational Practices, Version 2. Available at https://doi.org/10.17487/RFC6781

Snippet:

IETF RFC 6781, DNSSEC Operational Practices, Version 2. Available at https://doi.org/10.17487/RFC6781

HTML (ISO 690 compliant)

Preview:

IETF RFC 6781, DNSSEC Operational Practices, Version 2. Available at https://doi.org/10.17487/RFC6781

Snippet:

<span class="citation"><cite>IETF RFC 6781</cite>, DNSSEC Operational Practices, Version 2. Available at <a href="https://doi.org/10.17487/RFC6781" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6781</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6781, DNSSEC Operational Practices, Version 2
doi: 10.17487/RFC6781
url: https://doi.org/10.17487/RFC6781

Snippet:

<li>
<cite id="bib-rfc6781">IETF RFC 6781</cite>, DNSSEC Operational Practices, Version 2
<span class="doi">10.17487/RFC6781</span>
</li>

Referenced By

IETF RFC 6840 [Active*]
IETF RFC 7671 [Active*]
IETF RFC 8499 [Superseded*]
IETF RFC 8624 [Superseded*]
IETF RFC 9210 [Active*]
IETF RFC 9499 [Active*]
IETF RFC 9904 [Active*]