A Root Key Trust Anchor Sentinel for DNSSEC
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 19
- Abstract
- The DNS Security Extensions (DNSSEC) were developed to provide origin authentication and integrity protection for DNS data by using digital signatures. These digital signatures can be verified by building a chain of trust starting from a trust anchor and proceeding down to a particular node in the DNS. This document specifies a mechanism that will allow an end user and third parties to determine the trusted key state for the root key of the resolvers that handle that user's DNS queries. Note that this method is only applicable for determining which keys are in the trust store for the root key.
- Publication Date
- 2018-12-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC8509- Link
- https://doi.org/10.17487/RFC8509
- Author(s)
- Geoff HustonJoao Luis Silva DamasWarren Kumari
- Keyword(s)
- DNSSEC, KSK, Trust Anchor, DNS, Key Rollover, Root Key, Security
Latest version of IETF RFC 8509
Document Versions — IETF RFC 8509
-
▶ IETF RFC 8509 (2018-12-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1034 [Active*]
- IETF RFC 2119 [Active*]
- IETF RFC 2308 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4035 [Active*]
- IETF RFC 5011 [Active*]
- IETF RFC 8174 [Active*]
Bibliographic Reference(s)
- IETF RFC 7719 [Superseded*]
- IETF RFC 8145 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC8509.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 8509, A Root Key Trust Anchor Sentinel for DNSSEC. Available at https://doi.org/10.17487/RFC8509
Snippet:
IETF RFC 8509, A Root Key Trust Anchor Sentinel for DNSSEC. Available at https://doi.org/10.17487/RFC8509
HTML (ISO 690 compliant)
Preview:
IETF RFC 8509, A Root Key Trust Anchor Sentinel for DNSSEC. Available at https://doi.org/10.17487/RFC8509
Snippet:
<span class="citation"><cite>IETF RFC 8509</cite>, A Root Key Trust Anchor Sentinel for DNSSEC. Available at <a href="https://doi.org/10.17487/RFC8509" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8509</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 8509, A Root Key Trust Anchor Sentinel for DNSSEC
doi: 10.17487/RFC8509
url: https://doi.org/10.17487/RFC8509
doi: 10.17487/RFC8509
url: https://doi.org/10.17487/RFC8509
Snippet:
<li> <cite id="bib-rfc8509">IETF RFC 8509</cite>, A Root Key Trust Anchor Sentinel for DNSSEC <span class="doi">10.17487/RFC8509</span> </li>
Referenced By
- IETF RFC 9364 [Active*]