RFC 4033: DNS Security Introduction and Requirements

The Domain Name System Security Extensions (DNSSEC) add data origin authentication and data integrity to the Domain Name System. This document introduces…

Read RFC 4033 on the RFC Editor

Outgoing relationships (25 related RFCs)

Updates, Normative reference — RFC 1035: Domain names - implementation and specification
Updates, Normative reference — RFC 1034: Domain names - concepts and facilities
Updates, Informative reference — RFC 2136: Dynamic Updates in the Domain Name System (DNS UPDATE)
Updates, Informative reference — RFC 2181: Clarifications to the DNS Specification
Updates, Informative reference — RFC 2308: Negative Caching of DNS Queries (DNS NCACHE)
Updates, Informative reference — RFC 3597: Handling of Unknown DNS Resource Record (RR) Types
Updates, Normative reference — RFC 3225: Indicating Resolver Support of DNSSEC
Updates, Normative reference — RFC 3226: DNSSEC and IPv6 A6 aware server/resolver message size requirements
Obsoletes, Normative reference — RFC 2535: Domain Name System Security Extensions
Obsoletes, Informative reference — RFC 3008: Domain Name System Security (DNSSEC) Signing Authority
Obsoletes, Normative reference — RFC 3445: Limiting the Scope of the KEY Resource Record (RR)
Obsoletes, Informative reference — RFC 3755: Legacy Resolver Compatibility for Delegation Signer (DS)
Obsoletes, Informative reference — RFC 3757: Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag
Obsoletes, Informative reference — RFC 3090: DNS Security Extension Clarification on Zone Status
Obsoletes, Informative reference — RFC 3655: Redefinition of DNS Authenticated Data (AD) bit
Obsoletes, Informative reference — RFC 3658: Delegation Signer (DS) Resource Record (RR)
Obsoletes, Informative reference — RFC 3845: DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 2671: Extension Mechanisms for DNS (EDNS0)
Informative reference — RFC 3007: Secure Domain Name System (DNS) Dynamic Update
Informative reference — RFC 2845: Secret Key Transaction Authentication for DNS (TSIG)
Informative reference — RFC 3833: Threat Analysis of the Domain Name System (DNS)
Informative reference — RFC 2931: DNS Request and Transaction Signatures ( SIG(0)s )
Informative reference — RFC 2538: Storing Certificates in the Domain Name System (DNS)

Incoming relationships (126 related RFCs)

Showing 50 of 126 related RFCs.

Updated by — RFC 6840: Clarifications and Implementation Notes for DNS Security (DNSSEC)
Updated by — RFC 6014: Cryptographic Algorithm Identifier Allocation for DNSSEC
Normatively referenced by — RFC 6275: Mobility Support in IPv6
Normatively referenced by — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normatively referenced by — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Normatively referenced by — RFC 9499: DNS Terminology
Normatively referenced by — RFC 7435: Opportunistic Security: Some Protection Most of the Time
Normatively referenced by — RFC 6672: DNAME Redirection in the DNS
Normatively referenced by — RFC 9364: DNS Security Extensions (DNSSEC)
Normatively referenced by — RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)
Normatively referenced by — RFC 4592: The Role of Wildcards in the Domain Name System
Normatively referenced by — RFC 8094: DNS over Datagram Transport Layer Security (DTLS)
Normatively referenced by — RFC 6434: IPv6 Node Requirements
Normatively referenced by — RFC 7344: Automating DNSSEC Delegation Trust Maintenance
Normatively referenced by — RFC 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors
Normatively referenced by — RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
Normatively referenced by — RFC 6740: Identifier-Locator Network Protocol (ILNP) Architectural Description
Normatively referenced by — RFC 7871: Client Subnet in DNS Queries
Normatively referenced by — RFC 4641: DNSSEC Operational Practices
Normatively referenced by — RFC 4966: Reasons to Move the Network Address Translator - Protocol Translator (NAT-PT) to Historic Status
Normatively referenced by — RFC 5617: DomainKeys Identified Mail (DKIM) Author Domain Signing Practices (ADSP)
Normatively referenced by — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Normatively referenced by — RFC 6742: DNS Resource Records for the Identifier-Locator Network Protocol (ILNP)
Normatively referenced by — RFC 7719: DNS Terminology
Normatively referenced by — RFC 6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
Normatively referenced by — RFC 5986: Discovering the Local Location Information Server (LIS)
Normatively referenced by — RFC 4470: Minimally Covering NSEC Records and DNSSEC On-line Signing
Normatively referenced by — RFC 7129: Authenticated Denial of Existence in the DNS
Normatively referenced by — RFC 7828: The edns-tcp-keepalive EDNS0 Option
Normatively referenced by — RFC 8806: Running a Root Server Local to a Resolver
Normatively referenced by — RFC 8811: DDoS Open Threat Signaling (DOTS) Architecture
Normatively referenced by — RFC 4956: DNS Security (DNSSEC) Opt-In
Normatively referenced by — RFC 7583: DNSSEC Key Rollover Timing Considerations
Normatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Normatively referenced by — RFC 7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
Normatively referenced by — RFC 8881: Network File System (NFS) Version 4 Minor Version 1 Protocol
Normatively referenced by — RFC 8901: Multi-Signer DNSSEC Models
Normatively referenced by — RFC 4398: Storing Certificates in the Domain Name System (DNS)
Normatively referenced by — RFC 5358: Preventing Use of Recursive Nameservers in Reflector Attacks
Normatively referenced by — RFC 6841: A Framework for DNSSEC Policies and DNSSEC Practice Statements
Normatively referenced by — RFC 7673: Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records
Normatively referenced by — RFC 8005: Host Identity Protocol (HIP) Domain Name System (DNS) Extension
Normatively referenced by — RFC 8314: Cleartext Considered Obsolete: Use of Transport Layer Security (TLS) for Email Submission and Access
Normatively referenced by — RFC 8659: DNS Certification Authority Authorization (CAA) Resource Record
Normatively referenced by — RFC 5677: IEEE 802.21 Mobility Services Framework Design (MSFD)
Normatively referenced by — RFC 5678: Dynamic Host Configuration Protocol (DHCPv4 and DHCPv6) Options for IEEE 802.21 Mobility Services (MoS) Discovery
Normatively referenced by — RFC 5679: Locating IEEE 802.21 Mobility Services Using DNS
Normatively referenced by — RFC 6844: DNS Certification Authority Authorization (CAA) Resource Record
Normatively referenced by — RFC 8080: Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC
Normatively referenced by — RFC 8109: Initializing a DNS Resolver with Priming Queries