API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 7673
[ACTIVE]

Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records

Metadata

Publisher
IETF
Doc Type
Standard
Pages
16
Abstract
The DNS-Based Authentication of Named Entities (DANE) specification (RFC 6698) describes how to use TLSA resource records secured by DNSSEC (RFC 4033) to associate a server's connection endpoint with its Transport Layer Security (TLS) certificate (thus enabling administrators of domain names to specify the keys used in that domain's TLS servers). However, application protocols that use SRV records (RFC 2782) to indirectly name the target server connection endpoints for a service domain name cannot apply the rules from RFC 6698. Therefore, this document provides guidelines that enable such protocols to locate and use TLSA records.
Publication Date
2015-10-01
Status Note
Proposed Standard
DOI
10.17487/RFC7673
Link
https://doi.org/10.17487/RFC7673
Author(s)
Tony Finch
Matthew A. Miller
Peter Saint-Andre
Latest version of IETF RFC 7673

Document Versions — IETF RFC 7673

  • ▶ IETF RFC 7673 (2015-10-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7673.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 7673, Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records. Available at https://doi.org/10.17487/RFC7673
Snippet:
IETF RFC 7673, Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records. Available at https://doi.org/10.17487/RFC7673

HTML (ISO 690 compliant)

Preview:
IETF RFC 7673, Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records. Available at https://doi.org/10.17487/RFC7673
Snippet:
<span class="citation"><cite>IETF RFC 7673</cite>, Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records. Available at <a href="https://doi.org/10.17487/RFC7673" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7673</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 7673, Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records
doi: 10.17487/RFC7673
url: https://doi.org/10.17487/RFC7673
Snippet:
<li>
<cite id="bib-rfc7673">IETF RFC 7673</cite>, Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records
<span class="doi">10.17487/RFC7673</span>
</li>

Referenced By