API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 9018
[ACTIVE]

Interoperable Domain Name System (DNS) Server Cookies

Metadata

Publisher
IETF
Doc Type
Standard
Pages
16
Abstract
DNS Cookies, as specified in RFC 7873, are a lightweight DNS transaction security mechanism that provide limited protection to DNS servers and clients against a variety of denial-of-service amplification, forgery, or cache-poisoning attacks by off-path attackers. This document updates RFC 7873 with precise directions for creating Server Cookies so that an anycast server set including diverse implementations will interoperate with standard clients, with suggestions for constructing Client Cookies in a privacy-preserving fashion, and with suggestions on how to update a Server Secret. An IANA registry listing the methods and associated pseudorandom function suitable for creating DNS Server Cookies has been created with the method described in this document as the first and, as of the time of publication, only entry.
Publication Date
2021-04-01
Status Note
Proposed Standard
DOI
10.17487/RFC9018
Link
https://doi.org/10.17487/RFC9018
Author(s)
Ondřej Surý
Willem Toorop
Donald E. Eastlake 3rd
Mark P. Andrews
Keyword(s)
Hash Function
Latest version of IETF RFC 9018

Document Versions — IETF RFC 9018

  • ▶ IETF RFC 9018 (2021-04-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9018.json

Amends:
IETF RFC 7873 [Active*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 9018, Interoperable Domain Name System (DNS) Server Cookies. Available at https://doi.org/10.17487/RFC9018
Snippet:
IETF RFC 9018, Interoperable Domain Name System (DNS) Server Cookies. Available at https://doi.org/10.17487/RFC9018

HTML (ISO 690 compliant)

Preview:
IETF RFC 9018, Interoperable Domain Name System (DNS) Server Cookies. Available at https://doi.org/10.17487/RFC9018
Snippet:
<span class="citation"><cite>IETF RFC 9018</cite>, Interoperable Domain Name System (DNS) Server Cookies. Available at <a href="https://doi.org/10.17487/RFC9018" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9018</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 9018, Interoperable Domain Name System (DNS) Server Cookies
doi: 10.17487/RFC9018
url: https://doi.org/10.17487/RFC9018
Snippet:
<li>
<cite id="bib-rfc9018">IETF RFC 9018</cite>, Interoperable Domain Name System (DNS) Server Cookies
<span class="doi">10.17487/RFC9018</span>
</li>