Domain Name System (DNS) Cookies
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 25
- Abstract
- DNS Cookies are a lightweight DNS transaction security mechanism that provides limited protection to DNS servers and clients against a variety of increasingly common denial-of-service and amplification/ forgery or cache poisoning attacks by off-path attackers. DNS Cookies are tolerant of NAT, NAT-PT (Network Address Translation - Protocol Translation), and anycast and can be incrementally deployed. (Since DNS Cookies are only returned to the IP address from which they were originally received, they cannot be used to generally track Internet users.)
- Publication Date
- 2016-05-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC7873- Link
- https://doi.org/10.17487/RFC7873
- Author(s)
- Donald E. Eastlake 3rdMark P. Andrews
- Keyword(s)
- DoS, Forgery, Cache Poisoning, Off-path
Latest version of IETF RFC 7873
Document Versions — IETF RFC 7873
-
▶ IETF RFC 7873 (2016-05-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2119 [Active*]
- IETF RFC 4086 [Active*]
- IETF RFC 6891 [Active*]
- IETF RFC 7120 [Active*]
Bibliographic Reference(s)
- IETF draft-eastlake-fnv-10 [Active*]
- Olney, M., Mullen, P., and K. Miklavcic, "Dan Kaminsky's 2008 DNS Vulnerability", July 2008, < https://www.ietf.org/ mail-archive/web/dnsop/current/pdf2jgx6rzxN4.pdf >. EXTERNAL
- IETF RFC 2845 [Superseded*]
- IETF RFC 2930 [Active*]
- IETF RFC 2931 [Active*]
- IETF RFC 3022 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4035 [Active*]
- IETF RFC 4966 [Active*]
- IETF RFC 5452 [Active*]
- IETF RFC 6234 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC7873.json
Amended by:
RFC9018 NOT IN REGISTRY
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 7873, Domain Name System (DNS) Cookies. Available at https://doi.org/10.17487/RFC7873
Snippet:
IETF RFC 7873, Domain Name System (DNS) Cookies. Available at https://doi.org/10.17487/RFC7873
HTML (ISO 690 compliant)
Preview:
IETF RFC 7873, Domain Name System (DNS) Cookies. Available at https://doi.org/10.17487/RFC7873
Snippet:
<span class="citation"><cite>IETF RFC 7873</cite>, Domain Name System (DNS) Cookies. Available at <a href="https://doi.org/10.17487/RFC7873" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7873</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 7873, Domain Name System (DNS) Cookies
doi: 10.17487/RFC7873
url: https://doi.org/10.17487/RFC7873
doi: 10.17487/RFC7873
url: https://doi.org/10.17487/RFC7873
Snippet:
<li> <cite id="bib-rfc7873">IETF RFC 7873</cite>, Domain Name System (DNS) Cookies <span class="doi">10.17487/RFC7873</span> </li>
Referenced By
- IETF RFC 7901 [Active*]
- IETF RFC 7929 [Active*]
- IETF RFC 8162 [Active*]
- IETF RFC 8906 [Active*]
- IETF RFC 8932 [Active*]
- IETF RFC 9076 [Active*]
- IETF RFC 9210 [Active*]
- IETF RFC 9250 [Active*]
- IETF RFC 9520 [Active*]
- IETF RFC 9619 [Active*]