Secret Key Transaction Authentication for DNS (TSIG)
draft-ietf-dnsind-tsig-13

Document Type Expired Internet-Draft (dnsext WG)
Last updated 1999-12-21
Stream IETF
Intended RFC status Proposed Standard
Formats
Expired & archived
plain text pdf html bibtex
Stream WG state WG Document
Document shepherd No shepherd assigned
IESG IESG state Expired
Consensus Boilerplate Unknown
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at
https://www.ietf.org/archive/id/draft-ietf-dnsind-tsig-13.txt

Abstract

This protocol allows for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming from an approved client, or to authenticate responses as coming from an approved recursive name server. No provision has been made here for distributing the shared secrets; it is expected that a network administrator will statically configure name servers and clients using some out of band mechanism such as sneaker-net until a secure automated mechanism for key distribution is available.

Authors

Ólafur Guðmundsson (ogud@ogud.com)
Paul Vixie (vixie@isc.org)
Donald Eastlake (dee3@us.ibm.com)
Brian Wellington (brian.wellington@nominum.com)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)