API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 9276
[ACTIVE]

Guidance for NSEC3 Parameter Settings

Metadata

Publisher
IETF
Doc Type
Best Practice
Pages
10
Abstract
NSEC3 is a DNSSEC mechanism providing proof of nonexistence by asserting that there are no names that exist between two domain names within a zone. Unlike its counterpart NSEC, NSEC3 avoids directly disclosing the bounding domain name pairs. This document provides guidance on setting NSEC3 parameters based on recent operational deployment experience. This document updates RFC 5155 with guidance about selecting NSEC3 iteration and salt parameters.
Publication Date
2022-08-01
Status Note
Best Current Practice
DOI
10.17487/RFC9276
Link
https://doi.org/10.17487/RFC9276
Author(s)
Wes Hardaker
Viktor Dukhovni
Keyword(s)
DNSSEC, DNS, NSEC3, NSEC, Denial of Existence
Latest version of IETF RFC 9276

Document Versions — IETF RFC 9276

  • ▶ IETF RFC 9276 (2022-08-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9276.json

Amends:
IETF RFC 5155 [Active*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 9276, Guidance for NSEC3 Parameter Settings. Available at https://doi.org/10.17487/RFC9276
Snippet:
IETF RFC 9276, Guidance for NSEC3 Parameter Settings. Available at https://doi.org/10.17487/RFC9276

HTML (ISO 690 compliant)

Preview:
IETF RFC 9276, Guidance for NSEC3 Parameter Settings. Available at https://doi.org/10.17487/RFC9276
Snippet:
<span class="citation"><cite>IETF RFC 9276</cite>, Guidance for NSEC3 Parameter Settings. Available at <a href="https://doi.org/10.17487/RFC9276" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9276</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 9276, Guidance for NSEC3 Parameter Settings
doi: 10.17487/RFC9276
url: https://doi.org/10.17487/RFC9276
Snippet:
<li>
<cite id="bib-rfc9276">IETF RFC 9276</cite>, Guidance for NSEC3 Parameter Settings
<span class="doi">10.17487/RFC9276</span>
</li>