RFC 2845: Secret Key Transaction Authentication for DNS (TSIG)

This protocol allows for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming…

Read RFC 2845 on the RFC Editor

Outgoing relationships (1 related RFC)

Updates — RFC 1035: Domain names - implementation and specification

Incoming relationships (26 related RFCs)

Updated by — RFC 6895: Domain Name System (DNS) IANA Considerations
Updated by, Normatively referenced by — RFC 3645: Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG)
Updated by — RFC 4635: HMAC SHA (Hashed Message Authentication Code, Secure Hash Algorithm) TSIG Algorithm Identifiers
Obsoleted by, Normatively referenced by — RFC 8945: Secret Key Transaction Authentication for DNS (TSIG)
Normatively referenced by — RFC 5625: DNS Proxy Implementation Guidelines
Normatively referenced by — RFC 4795: Link-local Multicast Name Resolution (LLMNR)
Normatively referenced by — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Normatively referenced by — RFC 8901: Multi-Signer DNSSEC Models
Normatively referenced by — RFC 3655: Redefinition of DNS Authenticated Data (AD) bit
Normatively referenced by — RFC 5358: Preventing Use of Recursive Nameservers in Reflector Attacks
Normatively referenced by — RFC 6168: Requirements for Management of Name Servers for the DNS
Informatively referenced by — RFC 4033: DNS Security Introduction and Requirements
Informatively referenced by — RFC 4949: Internet Security Glossary, Version 2
Informatively referenced by — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Informatively referenced by — RFC 6762: Multicast DNS
Informatively referenced by — RFC 3007: Secure Domain Name System (DNS) Dynamic Update
Informatively referenced by — RFC 5247: Extensible Authentication Protocol (EAP) Key Management Framework
Informatively referenced by — RFC 7873: Domain Name System (DNS) Cookies
Informatively referenced by — RFC 8914: Extended DNS Errors
Informatively referenced by — RFC 6281: Understanding Apple's Back to My Mac (BTMM) Service
Informatively referenced by — RFC 4703: Resolution of Fully Qualified Domain Name (FQDN) Conflicts among Dynamic Host Configuration Protocol (DHCP) Clients
Informatively referenced by — RFC 6195: Domain Name System (DNS) IANA Considerations
Informatively referenced by — RFC 4701: A DNS Resource Record (RR) for Encoding Dynamic Host Configuration Protocol (DHCP) Information (DHCID RR)
Informatively referenced by — RFC 3123: A DNS RR Type for Lists of Address Prefixes (APL RR)
Informatively referenced by — RFC 6604: xNAME RCODE and Status Bits Clarification
Informatively referenced by — RFC 3130: Notes from the State-Of-The-Technology: DNSSEC