| Document | Title | Date | Status | ipr | AD / Shepherd |
|
draft-ietf-dnsext-dnssec-algo-signal-10
|
Signaling Cryptographic Algorithm Understanding in DNSSEC |
2013-04-08
|
RFC Ed Queue (for 4 days)
RFC Editor State: EDIT
|
|
|
Ted Lemon
|
RFC 2782
(draft-ietf-dnsind-rfc2052bis)
|
A DNS RR for specifying the location of services (DNS SRV) |
2000-02
|
RFC 2782 (Proposed Standard)
Updated by RFC 6335
Errata
|
|
|
|
RFC 2845
(draft-ietf-dnsext-tsig)
|
Secret Key Transaction Authentication for DNS (TSIG) |
2000-05
|
RFC 2845 (Proposed Standard)
Updated by RFC 3645, RFC 4635, RFC 6895
|
|
|
|
RFC 2929
(draft-ietf-dnsext-iana-dns)
|
Domain Name System (DNS) IANA Considerations |
2000-09
|
RFC 2929 (Best Current Practice)
Obsoleted by RFC 5395
|
|
|
|
RFC 2930
(draft-ietf-dnsext-tkey)
|
Secret Key Establishment for DNS (TKEY RR) |
2000-09
|
RFC 2930 (Proposed Standard)
Updated by RFC 6895
|
|
|
|
RFC 2931
(draft-ietf-dnsext-sig-zero)
|
DNS Request and Transaction Signatures ( SIG(0)s ) |
2000-09
|
RFC 2931 (Proposed Standard)
|
|
|
|
RFC 3007
(draft-ietf-dnsext-simple-secure-update)
|
Secure Domain Name System (DNS) Dynamic Update |
2000-11
|
RFC 3007 (Proposed Standard)
Updated by RFC 4033, RFC 4034, RFC 4035
|
|
|
|
RFC 3008
(draft-ietf-dnsext-signing-auth)
|
Domain Name System Security (DNSSEC) Signing Authority |
2000-11
|
RFC 3008 (Proposed Standard)
Obsoleted by RFC 4033, RFC 4034, RFC 4035
Updated by RFC 3658
|
|
|
|
RFC 3090
(draft-ietf-dnsext-zone-status)
|
DNS Security Extension Clarification on Zone Status |
2001-03
|
RFC 3090 (Proposed Standard)
Obsoleted by RFC 4033, RFC 4034, RFC 4035
Updated by RFC 3658
|
|
|
|
RFC 3110
(draft-ietf-dnsext-rsa)
|
RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS) |
2001-05
|
RFC 3110 (Proposed Standard)
Updated by RFC 6944
Errata
|
|
|
|
RFC 3123
(draft-ietf-dnsext-apl-rr)
|
A DNS RR Type for Lists of Address Prefixes (APL RR) |
2001-06
|
RFC 3123 (Experimental)
|
|
|
|
RFC 3197
(draft-ietf-dnsext-dnsmib-historical)
|
Applicability Statement for DNS MIB Extensions |
2001-11
|
RFC 3197 (Informational)
|
|
|
|
RFC 3225
(draft-ietf-dnsext-dnssec-okbit)
|
Indicating Resolver Support of DNSSEC |
2001-12
|
RFC 3225 (Proposed Standard)
Updated by RFC 4033, RFC 4034, RFC 4035
|
|
|
|
RFC 3226
(draft-ietf-dnsext-message-size)
|
DNSSEC and IPv6 A6 aware server/resolver message size requirements |
2001-12
|
RFC 3226 (Proposed Standard)
Updated by RFC 4033, RFC 4034, RFC 4035
Errata
|
|
|
|
RFC 3363
(draft-ietf-dnsext-ipv6-addresses)
|
Representing Internet Protocol version 6 (IPv6) Addresses in the Domain Name System (DNS) |
2002-08
|
RFC 3363 (Informational)
Updated by RFC 6672
Errata
|
|
|
Thomas Narten
|
RFC 3364
(draft-ietf-dnsext-ipv6-dns-tradeoffs)
|
Tradeoffs in Domain Name System (DNS) Support for Internet Protocol version 6 (IPv6) |
2002-08
|
RFC 3364 (Informational)
Errata
|
|
|
Thomas Narten
|
RFC 3425
(draft-ietf-dnsext-obsolete-iquery)
|
Obsoleting IQUERY |
2002-11
|
RFC 3425 (Proposed Standard)
|
|
|
Erik Nordmark
|
RFC 3445
(draft-ietf-dnsext-restrict-key-for-dnssec)
|
Limiting the Scope of the KEY Resource Record (RR) |
2002-12
|
RFC 3445 (Proposed Standard)
Obsoleted by RFC 4033, RFC 4034, RFC 4035
Errata
|
|
|
Erik Nordmark
|
RFC 3596
(draft-ietf-dnsext-rfc1886bis)
|
DNS Extensions to Support IP Version 6 |
2003-10
|
RFC 3596 (Draft Standard)
|
|
|
Erik Nordmark
|
RFC 3597
(draft-ietf-dnsext-unknown-rrs)
|
Handling of Unknown DNS Resource Record (RR) Types |
2003-09
|
RFC 3597 (Proposed Standard)
Updated by RFC 4033, RFC 4034, RFC 4035, RFC 5395, RFC 6195, RFC 6895
Errata
|
|
|
Ralph Droms
|
RFC 3645
(draft-ietf-dnsext-gss-tsig)
|
Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG) |
2003-10
|
RFC 3645 (Proposed Standard)
|
|
|
Erik Nordmark
|
RFC 3655
(draft-ietf-dnsext-ad-is-secure)
|
Redefinition of DNS Authenticated Data (AD) bit |
2003-11
|
RFC 3655 (Proposed Standard)
Obsoleted by RFC 4033, RFC 4034, RFC 4035
|
|
|
Erik Nordmark
|
RFC 3658
(draft-ietf-dnsext-delegation-signer)
|
Delegation Signer (DS) Resource Record (RR) |
2003-12
|
RFC 3658 (Proposed Standard)
Obsoleted by RFC 4033, RFC 4034, RFC 4035
Updated by RFC 3755
|
|
|
Thomas Narten
|
RFC 3755
(draft-ietf-dnsext-dnssec-2535typecode-change)
|
Legacy Resolver Compatibility for Delegation Signer (DS) |
2004-05
|
RFC 3755 (Proposed Standard)
Obsoleted by RFC 4033, RFC 4034, RFC 4035
Updated by RFC 3757, RFC 3845
|
|
|
Thomas Narten
|
RFC 3757
(draft-ietf-dnsext-keyrr-key-signing-flag)
|
Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag |
2004-05
|
RFC 3757 (Proposed Standard)
Obsoleted by RFC 4033, RFC 4034, RFC 4035
|
|
|
Thomas Narten
|
RFC 3833
(draft-ietf-dnsext-dns-threats)
|
Threat Analysis of the Domain Name System (DNS) |
2004-08
|
RFC 3833 (Informational)
|
|
|
Thomas Narten
|
RFC 3845
(draft-ietf-dnsext-nsec-rdata)
|
DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format |
2004-08
|
RFC 3845 (Proposed Standard)
Obsoleted by RFC 4033, RFC 4034, RFC 4035
|
|
|
Thomas Narten
|
RFC 4033
(draft-ietf-dnsext-dnssec-intro)
|
DNS Security Introduction and Requirements |
2005-03
|
RFC 4033 (Proposed Standard)
Updated by RFC 6014, RFC 6840
Errata
|
|
|
Thomas Narten
|
RFC 4034
(draft-ietf-dnsext-dnssec-records)
|
Resource Records for the DNS Security Extensions |
2005-03
|
RFC 4034 (Proposed Standard)
Updated by RFC 4470, RFC 6014, RFC 6840, RFC 6944
Errata
|
|
|
Thomas Narten
|
RFC 4035
(draft-ietf-dnsext-dnssec-protocol)
|
Protocol Modifications for the DNS Security Extensions |
2005-03
|
RFC 4035 (Proposed Standard)
Updated by RFC 4470, RFC 6014, RFC 6840
Errata
|
|
|
Thomas Narten
|
RFC 4343
(draft-ietf-dnsext-insensitive)
|
Domain Name System (DNS) Case Insensitivity Clarification |
2006-01
|
RFC 4343 (Proposed Standard)
Errata
|
|
|
Margaret Wasserman
|
RFC 4398
(draft-ietf-dnsext-rfc2538bis)
|
Storing Certificates in the Domain Name System (DNS) |
2006-03
|
RFC 4398 (Proposed Standard)
Updated by RFC 6944
Errata
|
|
|
Margaret Wasserman
|
RFC 4470
(draft-ietf-dnsext-dnssec-online-signing)
|
Minimally Covering NSEC Records and DNSSEC On-line Signing |
2006-04
|
RFC 4470 (Proposed Standard)
Errata
|
|
|
Margaret Wasserman
|
RFC 4471
(draft-ietf-dnsext-dns-name-p-s)
|
Derivation of DNS Name Predecessor and Successor |
2006-09
|
RFC 4471 (Experimental)
|
|
|
Mark Townsley
|
RFC 4509
(draft-ietf-dnsext-ds-sha256)
|
Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs) |
2006-05
|
RFC 4509 (Proposed Standard)
Errata
|
|
|
Margaret Wasserman
|
RFC 4592
(draft-ietf-dnsext-wcard-clarify)
|
The Role of Wildcards in the Domain Name System |
2006-07
|
RFC 4592 (Proposed Standard)
Errata
|
|
|
Margaret Wasserman
|
RFC 4635
(draft-ietf-dnsext-tsig-sha)
|
HMAC SHA (Hashed Message Authentication Code, Secure Hash Algorithm) TSIG Algorithm Identifiers |
2006-08
|
RFC 4635 (Proposed Standard)
Errata
|
|
|
Margaret Wasserman
|
RFC 4701
(draft-ietf-dnsext-dhcid-rr)
|
A DNS Resource Record (RR) for Encoding Dynamic Host Configuration Protocol (DHCP) Information (DHCID RR) |
2006-10
|
RFC 4701 (Proposed Standard)
Updated by RFC 5494
Errata
|
|
|
Margaret Wasserman
|
RFC 4795
(draft-ietf-dnsext-mdns)
|
Link-local Multicast Name Resolution (LLMNR) |
2007-01
|
RFC 4795 (Informational)
Errata
|
|
|
Mark Townsley
|
RFC 4955
(draft-ietf-dnsext-dnssec-experiments)
|
DNS Security (DNSSEC) Experiments |
2007-07
|
RFC 4955 (Proposed Standard)
|
|
|
Mark Townsley
|
RFC 4956
(draft-ietf-dnsext-dnssec-opt-in)
|
DNS Security (DNSSEC) Opt-In |
2007-07
|
RFC 4956 (Experimental)
Errata
|
|
|
Mark Townsley
|
RFC 4986
(draft-ietf-dnsext-rollover-requirements)
|
Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover |
2007-08
|
RFC 4986 (Informational)
|
|
|
Mark Townsley
|
RFC 5001
(draft-ietf-dnsext-nsid)
|
DNS Name Server Identifier (NSID) Option |
2007-08
|
RFC 5001 (Proposed Standard)
|
|
|
Mark Townsley
|
RFC 5011
(draft-ietf-dnsext-trustupdate-timers)
|
Automated Updates of DNS Security (DNSSEC) Trust Anchors |
2007-09
|
RFC 5011 (Internet Standard)
|
|
2
|
Mark Townsley
|
RFC 5155
(draft-ietf-dnsext-nsec3)
|
DNS Security (DNSSEC) Hashed Authenticated Denial of Existence |
2008-03
|
RFC 5155 (Proposed Standard)
Updated by RFC 6840, RFC 6944
Errata
|
|
|
Mark Townsley
|
RFC 5395
(draft-ietf-dnsext-2929bis)
|
Domain Name System (DNS) IANA Considerations |
2008-11
|
RFC 5395 (Best Current Practice)
Obsoleted by RFC 6195
Errata
|
|
|
Mark Townsley
|
RFC 5452
(draft-ietf-dnsext-forgery-resilience)
|
Measures for Making DNS More Resilient against Forged Answers |
2009-01
|
RFC 5452 (Proposed Standard)
|
|
|
Mark Townsley
|
RFC 5625
(draft-ietf-dnsext-dnsproxy)
|
DNS Proxy Implementation Guidelines |
2009-08
|
RFC 5625 (Best Current Practice)
|
|
|
Ralph Droms
|
RFC 5702
(draft-ietf-dnsext-dnssec-rsasha256)
|
Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC |
2009-10
|
RFC 5702 (Proposed Standard)
Updated by RFC 6944
|
|
|
Ralph Droms
|
RFC 5933
(draft-ietf-dnsext-dnssec-gost)
|
Use of GOST Signature Algorithms in DNSKEY and RRSIG Resource Records for DNSSEC |
2010-07
|
RFC 5933 (Proposed Standard)
Updated by RFC 6944
|
|
|
Ralph Droms
|
RFC 5936
(draft-ietf-dnsext-axfr-clarify)
|
DNS Zone Transfer Protocol (AXFR) |
2010-06
|
RFC 5936 (Proposed Standard)
|
|
|
Ralph Droms
|
RFC 5966
(draft-ietf-dnsext-dns-tcp-requirements)
|
DNS Transport over TCP - Implementation Requirements |
2010-08
|
RFC 5966 (Proposed Standard)
|
|
|
Ralph Droms
|
RFC 6014
(draft-ietf-dnsext-dnssec-alg-allocation)
|
Cryptographic Algorithm Identifier Allocation for DNSSEC |
2010-11
|
RFC 6014 (Proposed Standard)
|
|
|
Ralph Droms
|
RFC 6195
(draft-ietf-dnsext-5395bis)
|
Domain Name System (DNS) IANA Considerations |
2011-03
|
RFC 6195 (Best Current Practice)
Obsoleted by RFC 6895
|
|
|
Ralph Droms
|
RFC 6604
(draft-ietf-dnsext-xnamercode)
|
xNAME RCODE and Status Bits Clarification |
2012-04
|
RFC 6604 (Proposed Standard)
|
|
|
Ralph Droms
|
RFC 6605
(draft-ietf-dnsext-ecdsa)
|
Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC |
2012-04
|
RFC 6605 (Proposed Standard)
|
|
1
|
Ralph Droms
|
RFC 6672
(draft-ietf-dnsext-rfc2672bis-dname)
|
DNAME Redirection in the DNS |
2012-06
|
RFC 6672 (Proposed Standard)
|
|
|
Ralph Droms
Andrew Sullivan
|
RFC 6725
(draft-ietf-dnsext-dnssec-registry-update)
|
DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates |
2012-08
|
RFC 6725 (Proposed Standard)
|
|
|
Ralph Droms
|
RFC 6840
(draft-ietf-dnsext-dnssec-bis-updates)
|
Clarifications and Implementation Notes for DNS Security (DNSSEC) |
2013-02
|
RFC 6840 (Proposed Standard)
|
|
|
Ralph Droms
Andrew Sullivan
|
RFC 6891
(draft-ietf-dnsext-rfc2671bis-edns0)
|
Extension Mechanisms for DNS (EDNS(0)) |
2013-04
|
RFC 6891 (Internet Standard)
Errata
|
|
|
Ralph Droms
|
RFC 6895
(draft-ietf-dnsext-rfc6195bis)
|
Domain Name System (DNS) IANA Considerations |
2013-04
|
RFC 6895 (Best Current Practice)
|
|
|
Ralph Droms
|
RFC 6944
(draft-ietf-dnsext-dnssec-algo-imp-status)
|
Applicability Statement: DNS Security (DNSSEC) DNSKEY Algorithm Implementation Status |
2013-04
|
RFC 6944 (Proposed Standard)
|
|
|
Ralph Droms
|