Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC)
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 13
- Abstract
- The DNS Security Extensions (DNSSEC) were developed to provide origin authentication and integrity protection for DNS data by using digital signatures. These digital signatures can be verified by building a chain of trust starting from a trust anchor and proceeding down to a particular node in the DNS. This document specifies two different ways for validating resolvers to signal to a server which keys are referenced in their chain of trust. The data from such signaling allow zone administrators to monitor the progress of rollovers in a DNSSEC-signed zone.
- Publication Date
- 2017-04-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC8145- Link
- https://doi.org/10.17487/RFC8145
- Author(s)
- Duane WesselsWarren KumariPaul E. Hoffman
- Keyword(s)
- DNS, DNSSEC, Trust Anchor
Latest version of IETF RFC 8145
Document Versions — IETF RFC 8145
-
▶ IETF RFC 8145 (2017-04-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2119 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4035 [Active*]
- IETF RFC 6891 [Active*]
Bibliographic Reference(s)
- IETF.draft-ietf-dnsop-nsec-aggressiveuse-09 — NSEC-NSEC3-Usage EXTERNAL
- RFC5011 — RFC5011 EXTERNAL
- IETF RFC 6975 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC8145.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 8145, Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC). Available at https://doi.org/10.17487/RFC8145
Snippet:
IETF RFC 8145, Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC). Available at https://doi.org/10.17487/RFC8145
HTML (ISO 690 compliant)
Preview:
IETF RFC 8145, Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC). Available at https://doi.org/10.17487/RFC8145
Snippet:
<span class="citation"><cite>IETF RFC 8145</cite>, Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC). Available at <a href="https://doi.org/10.17487/RFC8145" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8145</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 8145, Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC)
doi: 10.17487/RFC8145
url: https://doi.org/10.17487/RFC8145
doi: 10.17487/RFC8145
url: https://doi.org/10.17487/RFC8145
Snippet:
<li> <cite id="bib-rfc8145">IETF RFC 8145</cite>, Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC) <span class="doi">10.17487/RFC8145</span> </li>
Referenced By
- IETF RFC 8553 [Active*]