RFC 8901: Multi-Signer DNSSEC Models

Many enterprises today employ the service of multiple DNS providers to distribute their authoritative DNS service. Deploying DNSSEC in such an environment may…

Read RFC 8901 on the RFC Editor

Outgoing relationships (19 related RFCs)

Normative reference — RFC 1035: Domain names - implementation and specification
Normative reference — RFC 1034: Domain names - concepts and facilities
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Normative reference — RFC 2845: Secret Key Transaction Authentication for DNS (TSIG)
Normative reference — RFC 6781: DNSSEC Operational Practices, Version 2
Normative reference — RFC 7344: Automating DNSSEC Delegation Trust Maintenance
Normative reference — RFC 8198: Aggressive Use of DNSSEC-Validated Cache
Normative reference — RFC 8078: Managing DS Records from the Parent via CDS/CDNSKEY
Informative reference — RFC 2136: Dynamic Updates in the Domain Name System (DNS UPDATE)
Informative reference — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Informative reference — RFC 8484: DNS Queries over HTTPS (DoH)
Informative reference — RFC 8499: DNS Terminology
Informative reference — RFC 1995: Incremental Zone Transfer in DNS
Informative reference — RFC 5731: Extensible Provisioning Protocol (EPP) Domain Name Mapping
Informative reference — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Informative reference — RFC 7129: Authenticated Denial of Existence in the DNS

Incoming relationships (4 related RFCs)

Informatively referenced by — RFC 9364: DNS Security Extensions (DNSSEC)
Informatively referenced by — RFC 8976: Message Digest for DNS Zones
Informatively referenced by — RFC 9615: Automatic DNSSEC Bootstrapping Using Authenticated Signals from the Zone's Operator
Informatively referenced by — RFC 9859: Generalized DNS Notifications