Interoperable Domain Name System (DNS) Server Cookies
draft-eastlake-dnsop-server-cookies-00
| Document | Type | Replaced Internet-Draft (individual) | |
|---|---|---|---|
| Authors | Donald E. Eastlake 3rd , Mark P. Andrews | ||
| Last updated | 2019-07-21 | ||
| Replaced by | RFC 9018 | ||
| Stream | (None) | ||
| Intended RFC status | (None) | ||
| Formats |
Expired & archived
plain text
htmlized
pdfized
bibtex
|
||
| Stream | Stream state | (No stream defined) | |
| Consensus boilerplate | Unknown | ||
| RFC Editor Note | (None) | ||
| IESG | IESG state | Replaced by draft-ietf-dnsop-server-cookies | |
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
https://www.ietf.org/archive/id/draft-eastlake-dnsop-server-cookies-00.txt
Abstract
DNS cookies, as specified in RFC 7873, are a lightweight DNS transaction security mechanism that provides limited protection to DNS servers and clients against a variety of denial-of-service and amplification, forgery, or cache poisoning attacks by off-path attackers. This document specifies a means of producing interoperable strong cookies so that an anycast server set including diverse implementations will interoperate with standard clients. This document updates RFC 7873.
Authors
Donald E. Eastlake 3rd
Mark P. Andrews
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)