Secret Key Transaction Authentication for DNS (TSIG)
draft-dupont-dnsop-rfc2845bis-01
| Document | Type | Replaced Internet-Draft (dnsop WG) | |
|---|---|---|---|
| Authors | Francis Dupont , Stephen Morris | ||
| Last updated | 2018-05-08 (Latest revision 2018-03-05) | ||
| Replaced by | RFC 8945 | ||
| Stream | Internet Engineering Task Force (IETF) | ||
| Intended RFC status | (None) | ||
| Formats |
Expired & archived
plain text
xml
htmlized
pdfized
bibtex
|
||
| Stream | WG state | Adopted by a WG | |
| Document shepherd | (None) | ||
| IESG | IESG state | Replaced by draft-ietf-dnsop-rfc2845bis | |
| Consensus boilerplate | Unknown | ||
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
https://www.ietf.org/archive/id/draft-dupont-dnsop-rfc2845bis-01.txt
Abstract
This protocol allows for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming from an approved client, or to authenticate responses as coming from an approved name server. No provision has been made here for distributing the shared secrets: it is expected that a network administrator will statically configure name servers and clients using some out of band mechanism. This document includes revised original TSIG specifications (RFC2845) and its extension for HMAC-SHA (RFC4635).
Authors
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)