RFC 4034: Resource Records for the DNS Security Extensions

This document is part of a family of documents that describe the DNS Security Extensions (DNSSEC). The DNS Security Extensions are a collection of resource…

Read RFC 4034 on the RFC Editor

Outgoing relationships (20 related RFCs)

Updates — RFC 1035: Domain names - implementation and specification
Updates — RFC 1034: Domain names - concepts and facilities
Updates — RFC 2136: Dynamic Updates in the Domain Name System (DNS UPDATE)
Updates — RFC 2181: Clarifications to the DNS Specification
Updates — RFC 2308: Negative Caching of DNS Queries (DNS NCACHE)
Updates — RFC 3597: Handling of Unknown DNS Resource Record (RR) Types
Updates — RFC 3225: Indicating Resolver Support of DNSSEC
Updates — RFC 3226: DNSSEC and IPv6 A6 aware server/resolver message size requirements
Obsoletes — RFC 2535: Domain Name System Security Extensions
Obsoletes — RFC 3008: Domain Name System Security (DNSSEC) Signing Authority
Obsoletes — RFC 3445: Limiting the Scope of the KEY Resource Record (RR)
Obsoletes — RFC 3755: Legacy Resolver Compatibility for Delegation Signer (DS)
Obsoletes — RFC 3757: Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag
Obsoletes — RFC 3090: DNS Security Extension Clarification on Zone Status
Obsoletes — RFC 3655: Redefinition of DNS Authenticated Data (AD) bit
Obsoletes — RFC 3658: Delegation Signer (DS) Resource Record (RR)
Obsoletes — RFC 3845: DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format
Normative reference — RFC 2931: DNS Request and Transaction Signatures ( SIG(0)s )
Normative reference — RFC 3110: RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)
Normative reference — RFC 2536: DSA KEYs and SIGs in the Domain Name System (DNS)

Incoming relationships (82 related RFCs)

Showing 50 of 82 related RFCs.

Updated by — RFC 6840: Clarifications and Implementation Notes for DNS Security (DNSSEC)
Updated by, Normatively referenced by — RFC 4470: Minimally Covering NSEC Records and DNSSEC On-line Signing
Updated by — RFC 6014: Cryptographic Algorithm Identifier Allocation for DNSSEC
Updated by, Normatively referenced by — RFC 9077: NSEC and NSEC3: TTLs and Aggressive Use
Updated by, Normatively referenced by — RFC 6944: Applicability Statement: DNS Security (DNSSEC) DNSKEY Algorithm Implementation Status
Updated by, Normatively referenced by — RFC 9824: Compact Denial of Existence in DNSSEC
Updated by, Normatively referenced by — RFC 9905: Deprecating the Use of SHA-1 in DNSSEC Signature Algorithms
Normatively referenced by — RFC 4033: DNS Security Introduction and Requirements
Normatively referenced by — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normatively referenced by — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Normatively referenced by — RFC 6762: Multicast DNS
Normatively referenced by — RFC 9499: DNS Terminology
Normatively referenced by — RFC 5201: Host Identity Protocol
Normatively referenced by — RFC 6672: DNAME Redirection in the DNS
Normatively referenced by — RFC 9364: DNS Security Extensions (DNSSEC)
Normatively referenced by — RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)
Normatively referenced by — RFC 4592: The Role of Wildcards in the Domain Name System
Normatively referenced by — RFC 6434: IPv6 Node Requirements
Normatively referenced by — RFC 7344: Automating DNSSEC Delegation Trust Maintenance
Normatively referenced by — RFC 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors
Normatively referenced by — RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
Normatively referenced by — RFC 7401: Host Identity Protocol Version 2 (HIPv2)
Normatively referenced by — RFC 7871: Client Subnet in DNS Queries
Normatively referenced by — RFC 4641: DNSSEC Operational Practices
Normatively referenced by — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Normatively referenced by — RFC 7719: DNS Terminology
Normatively referenced by — RFC 9083: JSON Responses for the Registration Data Access Protocol (RDAP)
Normatively referenced by — RFC 6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
Normatively referenced by — RFC 7483: JSON Responses for the Registration Data Access Protocol (RDAP)
Normatively referenced by — RFC 7129: Authenticated Denial of Existence in the DNS
Normatively referenced by — RFC 4956: DNS Security (DNSSEC) Opt-In
Normatively referenced by — RFC 7583: DNSSEC Key Rollover Timing Considerations
Normatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Normatively referenced by — RFC 7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
Normatively referenced by — RFC 8078: Managing DS Records from the Parent via CDS/CDNSKEY
Normatively referenced by — RFC 8901: Multi-Signer DNSSEC Models
Normatively referenced by — RFC 4398: Storing Certificates in the Domain Name System (DNS)
Normatively referenced by — RFC 6841: A Framework for DNSSEC Policies and DNSSEC Practice Statements
Normatively referenced by — RFC 7477: Child-to-Parent Synchronization in DNS
Normatively referenced by — RFC 8005: Host Identity Protocol (HIP) Domain Name System (DNS) Extension
Normatively referenced by — RFC 6844: DNS Certification Authority Authorization (CAA) Resource Record
Normatively referenced by — RFC 8080: Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC
Normatively referenced by — RFC 8162: Using Secure DNS to Associate Certificates with Domain Names for S/MIME
Normatively referenced by — RFC 8689: SMTP Require TLS Option
Normatively referenced by — RFC 4310: Domain Name System (DNS) Security Extensions Mapping for the Extensible Provisioning Protocol (EPP)
Normatively referenced by — RFC 4431: The DNSSEC Lookaside Validation (DLV) DNS Resource Record
Normatively referenced by — RFC 4986: Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover
Normatively referenced by — RFC 6589: Considerations for Transitioning Content to IPv6
Normatively referenced by — RFC 6975: Signaling Cryptographic Algorithm Understanding in DNS Security Extensions (DNSSEC)
Normatively referenced by — RFC 7958: DNSSEC Trust Anchor Publication for the Root Zone