API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 8198
[ACTIVE]

Aggressive Use of DNSSEC-Validated Cache

Metadata

Publisher
IETF
Doc Type
Standard
Pages
13
Abstract
The DNS relies upon caching to scale; however, the cache lookup generally requires an exact match. This document specifies the use of NSEC/NSEC3 resource records to allow DNSSEC-validating resolvers to generate negative answers within a range and positive answers from wildcards. This increases performance, decreases latency, decreases resource utilization on both authoritative and recursive servers, and increases privacy. Also, it may help increase resilience to certain DoS attacks in some circumstances. This document updates RFC 4035 by allowing validating resolvers to generate negative answers based upon NSEC/NSEC3 records and positive answers in the presence of wildcards.
Publication Date
2017-07-01
Status Note
Proposed Standard
DOI
10.17487/RFC8198
Link
https://doi.org/10.17487/RFC8198
Author(s)
Kazunori Fujiwara
Akira Kato
Warren Kumari
Keyword(s)
Negative Caching, NSEC, NSEC3
Latest version of IETF RFC 8198

Document Versions — IETF RFC 8198

  • ▶ IETF RFC 8198 (2017-07-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8198.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 8198, Aggressive Use of DNSSEC-Validated Cache. Available at https://doi.org/10.17487/RFC8198
Snippet:
IETF RFC 8198, Aggressive Use of DNSSEC-Validated Cache. Available at https://doi.org/10.17487/RFC8198

HTML (ISO 690 compliant)

Preview:
IETF RFC 8198, Aggressive Use of DNSSEC-Validated Cache. Available at https://doi.org/10.17487/RFC8198
Snippet:
<span class="citation"><cite>IETF RFC 8198</cite>, Aggressive Use of DNSSEC-Validated Cache. Available at <a href="https://doi.org/10.17487/RFC8198" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8198</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 8198, Aggressive Use of DNSSEC-Validated Cache
doi: 10.17487/RFC8198
url: https://doi.org/10.17487/RFC8198
Snippet:
<li>
<cite id="bib-rfc8198">IETF RFC 8198</cite>, Aggressive Use of DNSSEC-Validated Cache
<span class="doi">10.17487/RFC8198</span>
</li>

Referenced By