Skip to main content

Secret Key Transaction Authentication for DNS (TSIG)
draft-dupont-dnsop-rfc2845bis-01

Document Type Replaced Internet-Draft (dnsop WG)
Authors Francis Dupont , Stephen Morris
Last updated 2018-05-08 (Latest revision 2018-03-05)
Replaced by RFC 8945
Stream Internet Engineering Task Force (IETF)
Intended RFC status (None)
Formats
Expired & archived
Stream WG state Adopted by a WG
Document shepherd (None)
IESG IESG state Replaced by draft-ietf-dnsop-rfc2845bis
Consensus boilerplate Unknown
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

This protocol allows for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming from an approved client, or to authenticate responses as coming from an approved name server. No provision has been made here for distributing the shared secrets: it is expected that a network administrator will statically configure name servers and clients using some out of band mechanism. This document includes revised original TSIG specifications (RFC2845) and its extension for HMAC-SHA (RFC4635).

Authors

Francis Dupont
Stephen Morris

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)