NSEC and NSEC3: TTLs and Aggressive Use

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 8
Abstract: Due to a combination of unfortunate wording in earlier documents, aggressive use of NSEC and NSEC3 records may deny the existence of names far beyond the intended lifetime of a denial. This document changes the definition of the NSEC and NSEC3 TTL to correct that situation. This document updates RFCs 4034, 4035, 5155, and 8198.
Publication Date: 2021-07-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9077
Link: https://doi.org/10.17487/RFC9077
Author(s): Peter van Dijk
Keyword(s): DNSSEC, Negative Caching, Denial of Existence

Latest version of IETF RFC 9077

Document Versions — IETF RFC 9077

▶ IETF RFC 9077 (2021-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2308 [Active*]
IETF RFC 4034 [Active*]
IETF RFC 4035 [Active*]
RFC5155 — RFC5155 EXTERNAL
IETF RFC 8174 [Active*]
IETF RFC 8198 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9077.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9077, NSEC and NSEC3: TTLs and Aggressive Use. Available at https://doi.org/10.17487/RFC9077

Snippet:

IETF RFC 9077, NSEC and NSEC3: TTLs and Aggressive Use. Available at https://doi.org/10.17487/RFC9077

HTML (ISO 690 compliant)

Preview:

IETF RFC 9077, NSEC and NSEC3: TTLs and Aggressive Use. Available at https://doi.org/10.17487/RFC9077

Snippet:

<span class="citation"><cite>IETF RFC 9077</cite>, NSEC and NSEC3: TTLs and Aggressive Use. Available at <a href="https://doi.org/10.17487/RFC9077" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9077</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9077, NSEC and NSEC3: TTLs and Aggressive Use
doi: 10.17487/RFC9077
url: https://doi.org/10.17487/RFC9077

Snippet:

<li>
<cite id="bib-rfc9077">IETF RFC 9077</cite>, NSEC and NSEC3: TTLs and Aggressive Use
<span class="doi">10.17487/RFC9077</span>
</li>