RFC 2535: Domain Name System Security Extensions

This document incorporates feedback on RFC 2065 from early implementers and potential users. [STANDARDS-TRACK]

Read RFC 2535 on the RFC Editor

Outgoing relationships (21 related RFCs)

Updates, Informative reference — RFC 1035: Domain names - implementation and specification
Updates, Informative reference — RFC 1034: Domain names - concepts and facilities
Updates, Informative reference — RFC 2181: Clarifications to the DNS Specification
Obsoletes, Informative reference — RFC 2065: Domain Name System Security Extensions
Informative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Informative reference — RFC 2045: Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies
Informative reference — RFC 2401: Security Architecture for the Internet Protocol
Informative reference — RFC 2434: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 2136: Dynamic Updates in the Domain Name System (DNS UPDATE)
Informative reference — RFC 1305: Network Time Protocol (Version 3) Specification, Implementation and Analysis
Informative reference — RFC 1982: Serial Number Arithmetic
Informative reference — RFC 1995: Incremental Zone Transfer in DNS
Informative reference — RFC 2536: DSA KEYs and SIGs in the Domain Name System (DNS)
Informative reference — RFC 1033: Domain Administrators Operations Guide
Informative reference — RFC 2030: Simple Network Time Protocol (SNTP) Version 4 for IPv4, IPv6 and OSI
Informative reference — RFC 2137: Secure Domain Name System Dynamic Update
Informative reference — RFC 2538: Storing Certificates in the Domain Name System (DNS)
Informative reference — RFC 2537: RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)
Informative reference — RFC 2539: Storage of Diffie-Hellman Keys in the Domain Name System (DNS)
Informative reference — RFC 2541: DNS Security Operational Considerations
Informative reference — RFC 1530: Principles of Operation for the TPC.INT Subdomain: General Principles and Policy

Incoming relationships (37 related RFCs)

Updated by, Informatively referenced by — RFC 3007: Secure Domain Name System (DNS) Dynamic Update
Updated by — RFC 2931: DNS Request and Transaction Signatures ( SIG(0)s )
Updated by, Normatively referenced by — RFC 3597: Handling of Unknown DNS Resource Record (RR) Types
Updated by, Informatively referenced by — RFC 3008: Domain Name System Security (DNSSEC) Signing Authority
Updated by — RFC 3226: DNSSEC and IPv6 A6 aware server/resolver message size requirements
Updated by — RFC 3445: Limiting the Scope of the KEY Resource Record (RR)
Updated by, Normatively referenced by — RFC 3755: Legacy Resolver Compatibility for Delegation Signer (DS)
Updated by — RFC 3757: Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag
Updated by, Informatively referenced by — RFC 3090: DNS Security Extension Clarification on Zone Status
Updated by, Normatively referenced by — RFC 3655: Redefinition of DNS Authenticated Data (AD) bit
Updated by, Normatively referenced by — RFC 3658: Delegation Signer (DS) Resource Record (RR)
Updated by, Normatively referenced by — RFC 3845: DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format
Obsoleted by, Normatively referenced by — RFC 4033: DNS Security Introduction and Requirements
Obsoleted by — RFC 4034: Resource Records for the DNS Security Extensions
Obsoleted by — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normatively referenced by — RFC 3646: DNS Configuration options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6)
Normatively referenced by — RFC 5507: Design Choices When Expanding the DNS
Informatively referenced by — RFC 3490: Internationalizing Domain Names in Applications (IDNA)
Informatively referenced by — RFC 6762: Multicast DNS
Informatively referenced by — RFC 9364: DNS Security Extensions (DNSSEC)
Informatively referenced by — RFC 3110: RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)
Informatively referenced by — RFC 2536: DSA KEYs and SIGs in the Domain Name System (DNS)
Informatively referenced by — RFC 3225: Indicating Resolver Support of DNSSEC
Informatively referenced by — RFC 3548: The Base16, Base32, and Base64 Data Encodings
Informatively referenced by — RFC 2826: IAB Technical Comment on the Unique DNS Root
Informatively referenced by — RFC 3397: Dynamic Host Configuration Protocol (DHCP) Domain Search Option
Informatively referenced by — RFC 7129: Authenticated Denial of Existence in the DNS
Informatively referenced by — RFC 2538: Storing Certificates in the Domain Name System (DNS)
Informatively referenced by — RFC 2537: RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)
Informatively referenced by — RFC 2539: Storage of Diffie-Hellman Keys in the Domain Name System (DNS)
Informatively referenced by — RFC 2541: DNS Security Operational Considerations
Informatively referenced by — RFC 3645: Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG)
Informatively referenced by — RFC 3123: A DNS RR Type for Lists of Address Prefixes (APL RR)
Informatively referenced by — RFC 3675: .sex Considered Dangerous
Informatively referenced by — RFC 2540: Detached Domain Name System (DNS) Information
Informatively referenced by — RFC 3130: Notes from the State-Of-The-Technology: DNSSEC
Informatively referenced by — RFC 4027: Domain Name System Media Types