Algorithm Implementation Requirements and Usage Guidance for DNSSEC

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 11
Abstract: The DNSSEC protocol makes use of various cryptographic algorithms in order to provide authentication of DNS data and proof of nonexistence. To ensure interoperability between DNS resolvers and DNS authoritative servers, it is necessary to specify a set of algorithm implementation requirements and usage guidelines to ensure that there is at least one algorithm that all implementations support. This document defines the current algorithm implementation requirements and usage guidance for DNSSEC. This document obsoletes RFC 6944.
Publication Date: 2019-06-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8624
Link: https://doi.org/10.17487/RFC8624
Author(s): Paul Wouters
Ondřej Surý

Latest version of IETF RFC 8624

Document Versions — IETF RFC 8624

▶ IETF RFC 8624 (2019-06-01)

THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

IETF RFC 9904 [Active*]

Amended by:

IETF RFC 9157 [Active*]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 4034 [Active*]
RFC5155 — RFC5155 EXTERNAL
RFC5702 — RFC5702 EXTERNAL
RFC6605 — RFC6605 EXTERNAL
IETF RFC 6979 [Active*]
RFC6986 — RFC6986 EXTERNAL
RFC7344 — RFC7344 EXTERNAL
IETF RFC 8032 [Active*]
RFC8078 — RFC8078 EXTERNAL
RFC8080 — RFC8080 EXTERNAL
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

IANA, "Domain Name System Security (DNSSEC) Algorithm Numbers", < http://www.iana.org/assignments/dns-sec-alg-numbers >. EXTERNAL
IANA, "Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms", < http://www.iana.org/assignments/ds-rr-types >. EXTERNAL
IETF RFC 4307 [Superseded*]
RFC5933 — RFC5933 EXTERNAL
IETF RFC 6781 [Active*]
IETF RFC 6944 [Superseded*]
RFC7091 — RFC7091 EXTERNAL
RFC7583 — RFC7583 EXTERNAL
IETF RFC 8247 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8624.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8624, Algorithm Implementation Requirements and Usage Guidance for DNSSEC. Available at https://doi.org/10.17487/RFC8624

Snippet:

IETF RFC 8624, Algorithm Implementation Requirements and Usage Guidance for DNSSEC. Available at https://doi.org/10.17487/RFC8624

HTML (ISO 690 compliant)

Preview:

IETF RFC 8624, Algorithm Implementation Requirements and Usage Guidance for DNSSEC. Available at https://doi.org/10.17487/RFC8624

Snippet:

<span class="citation"><cite>IETF RFC 8624</cite>, Algorithm Implementation Requirements and Usage Guidance for DNSSEC. Available at <a href="https://doi.org/10.17487/RFC8624" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8624</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8624, Algorithm Implementation Requirements and Usage Guidance for DNSSEC
doi: 10.17487/RFC8624
url: https://doi.org/10.17487/RFC8624

Snippet:

<li>
<cite id="bib-rfc8624">IETF RFC 8624</cite>, Algorithm Implementation Requirements and Usage Guidance for DNSSEC
<span class="doi">10.17487/RFC8624</span>
</li>

Referenced By

IETF RFC 9157 [Active*]
IETF RFC 9904 [Active*]