Secret Key Transaction Authentication for DNS (TSIG)
draft-ietf-dnsind-tsig-13
| Document | Type | Expired Internet-Draft (dnsext WG) | |
|---|---|---|---|
| Authors | Ólafur Guðmundsson , Paul A. Vixie , Donald E. Eastlake 3rd , Brian Wellington | ||
| Last updated | 1999-12-21 (Latest revision 1999-12-10) | ||
| Stream | Internet Engineering Task Force (IETF) | ||
| Formats |
Expired & archived
plain text
htmlized
pdfized
bibtex
|
||
| Stream | WG state | WG Document | |
| Document shepherd | (None) | ||
| IESG | IESG state | Expired | |
| Consensus boilerplate | Unknown | ||
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
https://www.ietf.org/archive/id/draft-ietf-dnsind-tsig-13.txt
Abstract
This protocol allows for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming from an approved client, or to authenticate responses as coming from an approved recursive name server. No provision has been made here for distributing the shared secrets; it is expected that a network administrator will statically configure name servers and clients using some out of band mechanism such as sneaker-net until a secure automated mechanism for key distribution is available.
Authors
Ólafur Guðmundsson
Paul A. Vixie
Donald E. Eastlake 3rd
Brian Wellington
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)