RFC 9905: Deprecating the Use of SHA-1 in DNSSEC Signature Algorithms

This document deprecates the use of the RSASHA1 and RSASHA1-NSEC3-SHA1 algorithms for the creation of DNS Public Key (DNSKEY) and Resource Record Signature…

Read RFC 9905 on the RFC Editor

Outgoing relationships (9 related RFCs)

Updates, Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Updates, Normative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 3174: US Secure Hash Algorithm 1 (SHA1)
Normative reference — RFC 9499: DNS Terminology
Normative reference — RFC 9364: DNS Security Extensions (DNSSEC)
Normative reference — RFC 3110: RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)
Normative reference — RFC 9904: DNSSEC Cryptographic Algorithm Recommendation Update Process