RFC 8932: Recommendations for DNS Privacy Service Operators

This document presents operational, policy, and security considerations for DNS recursive resolver operators who choose to offer DNS privacy services. With…

Read RFC 8932 on the RFC Editor

Outgoing relationships (35 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 7525: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normative reference — RFC 6973: Privacy Considerations for Internet Protocols
Normative reference — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Normative reference — RFC 8484: DNS Queries over HTTPS (DoH)
Normative reference — RFC 8499: DNS Terminology
Normative reference — RFC 7457: Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
Normative reference — RFC 7766: DNS Transport over TCP - Implementation Requirements
Normative reference — RFC 7871: Client Subnet in DNS Queries
Normative reference — RFC 8198: Aggressive Use of DNSSEC-Validated Cache
Normative reference — RFC 8310: Usage Profiles for DNS over TLS and DNS over DTLS
Normative reference — RFC 8020: NXDOMAIN: There Really Is Nothing Underneath
Normative reference — RFC 7828: The edns-tcp-keepalive EDNS0 Option
Normative reference — RFC 8806: Running a Root Server Local to a Resolver
Normative reference — RFC 7830: The EDNS(0) Padding Option
Normative reference — RFC 8490: DNS Stateful Operations
Normative reference — RFC 7816: DNS Query Name Minimisation to Improve Privacy
Normative reference — RFC 8467: Padding Policies for Extension Mechanisms for DNS (EDNS(0))
Informative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 4034: Resource Records for the DNS Security Extensions
Informative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Informative reference — RFC 6265: HTTP State Management Mechanism
Informative reference — RFC 5077: Transport Layer Security (TLS) Session Resumption without Server-Side State
Informative reference — RFC 6147: DNS64: DNS Extensions for Network Address Translation from IPv6 Clients to IPv4 Servers
Informative reference — RFC 8555: Automatic Certificate Management Environment (ACME)
Informative reference — RFC 8094: DNS over Datagram Transport Layer Security (DTLS)
Informative reference — RFC 6235: IP Flow Anonymization Support
Informative reference — RFC 7626: DNS Privacy Considerations
Informative reference — RFC 7873: Domain Name System (DNS) Cookies
Informative reference — RFC 8404: Effects of Pervasive Encryption on Operators
Informative reference — RFC 8027: DNSSEC Roadblock Avoidance
Informative reference — RFC 8618: Compacted-DNS (C-DNS): A Format for DNS Packet Capture