Dnssec Workgroup RFCs

Browse Dnssec Workgroup RFCs by Number

RFC2065 - Domain Name System Security Extensions: The Domain Name System (DNS) has become a critical operational part of the Internet infrastructure yet it has no strong security mechanisms to assure data integrity or authentication. Extensions to the DNS are described that provide these services to security aware resolvers or applications through the use of cryptographic digital signatures. [STANDARDS-TRACK]
RFC2137 - Secure Domain Name System Dynamic Update: This memo describes how to use DNSSEC digital signatures covering requests and data to secure updates and restrict updates to those authorized to perform them as indicated by the updater's possession of cryptographic keys. [STANDARDS-TRACK]
RFC2535 - Domain Name System Security Extensions: This document incorporates feedback on RFC 2065 from early implementers and potential users. [STANDARDS-TRACK]
RFC2536 - DSA KEYs and SIGs in the Domain Name System (DNS): A standard method for storing US Government Digital Signature Algorithm keys and signatures in the Domain Name System is described which utilizes DNS KEY and SIG resource records. [STANDARDS-TRACK]
RFC2537 - RSA/MD5 KEYs and SIGs in the Domain Name System (DNS): A standard method for storing RSA keys and and RSA/MD5 based signatures in the Domain Name System is described which utilizes DNS KEY and SIG resource records. [STANDARDS-TRACK]
RFC2538 - Storing Certificates in the Domain Name System (DNS): Cryptographic public key are frequently published and their authenticity demonstrated by certificates. A CERT resource record (RR) is defined so that such certificates and related certificate revocation lists can be stored in the Domain Name System (DNS). [STANDARDS-TRACK]
RFC2539 - Storage of Diffie-Hellman Keys in the Domain Name System (DNS): A standard method for storing Diffie-Hellman keys in the Domain Name System is described which utilizes DNS KEY resource records. [STANDARDS-TRACK]
RFC2540 - Detached Domain Name System (DNS) Information: A standard format is defined for representing detached DNS information. This is anticipated to be of use for storing information retrieved from the Domain Name System (DNS), including security information, in archival contexts or contexts not connected to the Internet. This memo defines an Experimental Protocol for the Internet community.
RFC2541 - DNS Security Operational Considerations: This document discusses these operational aspects for keys and signatures used in connection with the KEY and SIG DNS resource records. This memo provides information for the Internet community.