RFC 9102: TLS DNSSEC Chain Extension

This document describes an experimental TLS extension for the in-band transport of the complete set of records that can be validated by DNSSEC and that are…

Read RFC 9102 on the RFC Editor

Outgoing relationships (19 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 1035: Domain names - implementation and specification
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normative reference — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Normative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Normative reference — RFC 8310: Usage Profiles for DNS over TLS and DNS over DTLS
Normative reference — RFC 7218: Adding Acronyms to Simplify Conversations about DNS-Based Authentication of Named Entities (DANE)
Normative reference — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Informative reference — RFC 5905: Network Time Protocol Version 4: Protocol and Algorithms Specification
Informative reference — RFC 7250: Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Informative reference — RFC 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors
Informative reference — RFC 7901: CHAIN Query Requests in DNS