API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 8976
[ACTIVE]

Message Digest for DNS Zones

Metadata

Publisher
IETF
Doc Type
Standard
Pages
31
Abstract
This document describes a protocol and new DNS Resource Record that provides a cryptographic message digest over DNS zone data at rest. The ZONEMD Resource Record conveys the digest data in the zone itself. When used in combination with DNSSEC, ZONEMD allows recipients to verify the zone contents for data integrity and origin authenticity. This provides assurance that received zone data matches published data, regardless of how the zone data has been transmitted and received. When used without DNSSEC, ZONEMD functions as a checksum, guarding only against unintentional changes. ZONEMD does not replace DNSSEC: DNSSEC protects individual RRsets (DNS data with fine granularity), whereas ZONEMD protects a zone's data as a whole, whether consumed by authoritative name servers, recursive name servers, or any other applications. As specified herein, ZONEMD is impractical for large, dynamic zones due to the time and resources required for digest calculation. However, the ZONEMD record is extensible so that new digest schemes may be added in the future to support large, dynamic zones.
Publication Date
2021-02-01
Status Note
Proposed Standard
DOI
10.17487/RFC8976
Link
https://doi.org/10.17487/RFC8976
Author(s)
Duane Wessels
Piet Barber
Matt Weinberg
Warren Kumari
Wes Hardaker
Keyword(s)
DNS, DNSSEC, Checksum, Hash Function, Zone Transfer
Latest version of IETF RFC 8976

Document Versions — IETF RFC 8976

  • ▶ IETF RFC 8976 (2021-02-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8976.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 8976, Message Digest for DNS Zones. Available at https://doi.org/10.17487/RFC8976
Snippet:
IETF RFC 8976, Message Digest for DNS Zones. Available at https://doi.org/10.17487/RFC8976

HTML (ISO 690 compliant)

Preview:
IETF RFC 8976, Message Digest for DNS Zones. Available at https://doi.org/10.17487/RFC8976
Snippet:
<span class="citation"><cite>IETF RFC 8976</cite>, Message Digest for DNS Zones. Available at <a href="https://doi.org/10.17487/RFC8976" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8976</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 8976, Message Digest for DNS Zones
doi: 10.17487/RFC8976
url: https://doi.org/10.17487/RFC8976
Snippet:
<li>
<cite id="bib-rfc8976">IETF RFC 8976</cite>, Message Digest for DNS Zones
<span class="doi">10.17487/RFC8976</span>
</li>

Referenced By