%% You should probably cite draft-rafiee-intarea-cga-tsig-12 instead of this revision. @techreport{rafiee-intarea-cga-tsig-07, number = {draft-rafiee-intarea-cga-tsig-07}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-rafiee-intarea-cga-tsig/07/}, author = {Hosnieh Rafiee and Martin von Loewis and Christoph Meinel}, title = {{Secure DNS Authentication using CGA/SSAS Algorithm in IPv6}}, pagetotal = 26, year = 2014, month = feb, day = 14, abstract = {This document describes a new mechanism that can be used to reduce the need for human intervention during DNS authentication and secure DNS authentication in various scenarios such as the DNS authentication of resolvers to stub resolvers, authentication during zone transfers, authentication of root DNS servers to recursive DNS servers, and authentication during the FQDN (RFC 4703) update. Especially in the last scenario, i.e., FQDN, if the node uses the Neighbor Discovery Protocol (NDP) (RFC 4861, RFC 4862), unlike the Dynamic Host Configuration Protocol (DHCP) (RFC 3315), the node has no way of updating his FQDN records on the DNS and has no means for a secure authentication with the DNS server. While this is a major problem in NDP-enabled networks, this is a minor problem in DHCPv6. This is because the DHCP server updates the FQDN records on behalf of the nodes on the network. This document also introduces a possible algorithm for DNS data confidentiality.}, }