DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP
Metadata
- Publisher
- IETF
- Doc Type
- Experimental
- Pages
- 20
- Abstract
- OpenPGP is a message format for email (and file) encryption that lacks a standardized lookup mechanism to securely obtain OpenPGP public keys. DNS-Based Authentication of Named Entities (DANE) is a method for publishing public keys in DNS. This document specifies a DANE method for publishing and locating OpenPGP public keys in DNS for a specific email address using a new OPENPGPKEY DNS resource record. Security is provided via Secure DNS, however the OPENPGPKEY record is not a replacement for verification of authenticity via the "web of trust" or manual verification. The OPENPGPKEY record can be used to encrypt an email that would otherwise have to be sent unencrypted.
- Publication Date
- 2016-08-01
- Status Note
- Experimental
- DOI
10.17487/RFC7929- Link
- https://doi.org/10.17487/RFC7929
- Author(s)
- Paul Wouters
- Keyword(s)
- Opportunistic Security, Encrypted Email
Latest version of IETF RFC 7929
Document Versions — IETF RFC 7929
-
▶ IETF RFC 7929 (2016-08-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2119 [Active*]
- IETF RFC 2181 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4035 [Active*]
- IETF RFC 4648 [Active*]
- IETF RFC 4880 [Superseded*]
- IETF RFC 5754 [Active*]
Bibliographic Reference(s)
- IETF.draft-ietf-dane-smime-12 — SMIME EXTERNAL
- IETF.draft-levine-dns-mailbox-01 — MAILBOX EXTERNAL
- IETF.draft-shaw-openpgp-hkp-00 — HKP EXTERNAL
- IETF RFC 3597 [Active*]
- IETF RFC 4255 [Active*]
- IETF RFC 4398 [Active*]
- IETF RFC 5321 [Active*]
- IETF RFC 5322 [Active, Amended*]
- IETF RFC 6530 [Active*]
- IETF RFC 6672 [Active*]
- IETF RFC 6698 [Active*]
- IETF RFC 7258 [Active*]
- IETF RFC 7816 [Superseded*]
- IETF RFC 7858 [Active*]
- IETF RFC 7873 [Active*]
- UNICODE.STD.9.0.0 — Unicode90 EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC7929.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 7929, DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP. Available at https://doi.org/10.17487/RFC7929
Snippet:
IETF RFC 7929, DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP. Available at https://doi.org/10.17487/RFC7929
HTML (ISO 690 compliant)
Preview:
IETF RFC 7929, DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP. Available at https://doi.org/10.17487/RFC7929
Snippet:
<span class="citation"><cite>IETF RFC 7929</cite>, DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP. Available at <a href="https://doi.org/10.17487/RFC7929" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7929</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 7929, DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP
doi: 10.17487/RFC7929
url: https://doi.org/10.17487/RFC7929
doi: 10.17487/RFC7929
url: https://doi.org/10.17487/RFC7929
Snippet:
<li> <cite id="bib-rfc7929">IETF RFC 7929</cite>, DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP <span class="doi">10.17487/RFC7929</span> </li>
Referenced By
- IETF RFC 8162 [Active*]
- IETF RFC 8552 [Active*]
- IETF RFC 9076 [Active*]
- IETF RFC 9787 [Active*]
- IETF RFC 9788 [Active*]