datatracker.ietf.org
Sign In
Version 4.50, 2013-05-15
Report a bug

Protocol Modifications for the DNS Security Extensions
draft-ietf-dnsext-dnssec-protocol-09

RFC
Document Stream: IETF
Last updated: 2004-10-11
Intended RFC status: Proposed Standard
Other versions: (expired, archived): plain text, pdf, html

Document shepherd:(None)
Shepherd writeup
Consensus:Unknown

IESG State: RFC 4035
Responsible AD: Thomas Narten
Send notices to: ogud@ogud.com, olaf@ripe.net, scott.rose@nist.gov, masseyd@isi.edu, sra@isc.org, mlarson@verisign.com, roy.arends@telin.nl

This Internet-Draft is no longer active. Unofficial copies of old Internet-Drafts can be found here:
http://tools.ietf.org/id/draft-ietf-dnsext-dnssec-protocol.

Abstract:
This document is part of a family of documents that describe the DNS Security Extensions (DNSSEC). The DNS Security Extensions are a collection of new resource records and protocol modifications that add data origin authentication and data integrity to the DNS. This document describes the DNSSEC protocol modifications. This document defines the concept of a signed zone, along with the requirements for serving and resolving by using DNSSEC. These techniques allow a security-aware resolver to authenticate both DNS resource records and authoritative DNS error indications.

Authors:
Scott Rose <scott.rose@nist.gov>
Matt Larson <mlarson@verisign.com>
Dan Massey <masseyd@isi.edu>
Rob Austein <sra@isc.org>
Roy Arends <roy.arends@telin.nl>

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)