RFC 4035: Protocol Modifications for the DNS Security Extensions

This document is part of a family of documents that describe the DNS Security Extensions (DNSSEC). The DNS Security Extensions are a collection of new…

Read RFC 4035 on the RFC Editor

Outgoing relationships (17 related RFCs)

Updates — RFC 1035: Domain names - implementation and specification
Updates — RFC 1034: Domain names - concepts and facilities
Updates — RFC 2136: Dynamic Updates in the Domain Name System (DNS UPDATE)
Updates — RFC 2181: Clarifications to the DNS Specification
Updates — RFC 2308: Negative Caching of DNS Queries (DNS NCACHE)
Updates — RFC 3597: Handling of Unknown DNS Resource Record (RR) Types
Updates — RFC 3225: Indicating Resolver Support of DNSSEC
Updates — RFC 3226: DNSSEC and IPv6 A6 aware server/resolver message size requirements
Obsoletes — RFC 2535: Domain Name System Security Extensions
Obsoletes — RFC 3008: Domain Name System Security (DNSSEC) Signing Authority
Obsoletes — RFC 3445: Limiting the Scope of the KEY Resource Record (RR)
Obsoletes — RFC 3755: Legacy Resolver Compatibility for Delegation Signer (DS)
Obsoletes — RFC 3757: Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag
Obsoletes — RFC 3090: DNS Security Extension Clarification on Zone Status
Obsoletes — RFC 3655: Redefinition of DNS Authenticated Data (AD) bit
Obsoletes — RFC 3658: Delegation Signer (DS) Resource Record (RR)
Obsoletes — RFC 3845: DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format

Incoming relationships (82 related RFCs)

Showing 50 of 82 related RFCs.

Updated by — RFC 8198: Aggressive Use of DNSSEC-Validated Cache
Updated by — RFC 6840: Clarifications and Implementation Notes for DNS Security (DNSSEC)
Updated by, Normatively referenced by — RFC 4470: Minimally Covering NSEC Records and DNSSEC On-line Signing
Updated by — RFC 6014: Cryptographic Algorithm Identifier Allocation for DNSSEC
Updated by, Normatively referenced by — RFC 9077: NSEC and NSEC3: TTLs and Aggressive Use
Updated by, Normatively referenced by — RFC 9520: Negative Caching of DNS Resolution Failures
Updated by, Normatively referenced by — RFC 9824: Compact Denial of Existence in DNSSEC
Normatively referenced by — RFC 4033: DNS Security Introduction and Requirements
Normatively referenced by — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normatively referenced by — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Normatively referenced by — RFC 9499: DNS Terminology
Normatively referenced by — RFC 6672: DNAME Redirection in the DNS
Normatively referenced by — RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)
Normatively referenced by — RFC 4592: The Role of Wildcards in the Domain Name System
Normatively referenced by — RFC 6781: DNSSEC Operational Practices, Version 2
Normatively referenced by — RFC 5625: DNS Proxy Implementation Guidelines
Normatively referenced by — RFC 6434: IPv6 Node Requirements
Normatively referenced by — RFC 7344: Automating DNSSEC Delegation Trust Maintenance
Normatively referenced by — RFC 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors
Normatively referenced by — RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
Normatively referenced by — RFC 7871: Client Subnet in DNS Queries
Normatively referenced by — RFC 8914: Extended DNS Errors
Normatively referenced by — RFC 4641: DNSSEC Operational Practices
Normatively referenced by — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Normatively referenced by — RFC 7719: DNS Terminology
Normatively referenced by — RFC 6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
Normatively referenced by — RFC 7129: Authenticated Denial of Existence in the DNS
Normatively referenced by — RFC 4956: DNS Security (DNSSEC) Opt-In
Normatively referenced by — RFC 7583: DNSSEC Key Rollover Timing Considerations
Normatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Normatively referenced by — RFC 7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
Normatively referenced by — RFC 8901: Multi-Signer DNSSEC Models
Normatively referenced by — RFC 6841: A Framework for DNSSEC Policies and DNSSEC Practice Statements
Normatively referenced by — RFC 7673: Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records
Normatively referenced by — RFC 8005: Host Identity Protocol (HIP) Domain Name System (DNS) Extension
Normatively referenced by — RFC 9276: Guidance for NSEC3 Parameter Settings
Normatively referenced by — RFC 6844: DNS Certification Authority Authorization (CAA) Resource Record
Normatively referenced by — RFC 8080: Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC
Normatively referenced by — RFC 8162: Using Secure DNS to Associate Certificates with Domain Names for S/MIME
Normatively referenced by — RFC 8689: SMTP Require TLS Option
Normatively referenced by — RFC 4310: Domain Name System (DNS) Security Extensions Mapping for the Extensible Provisioning Protocol (EPP)
Normatively referenced by — RFC 4431: The DNSSEC Lookaside Validation (DLV) DNS Resource Record
Normatively referenced by — RFC 4986: Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover
Normatively referenced by — RFC 5028: A Telephone Number Mapping (ENUM) Service Registration for Instant Messaging (IM) Services
Normatively referenced by — RFC 5333: IANA Registration of Enumservices for Internet Calendaring
Normatively referenced by — RFC 6589: Considerations for Transitioning Content to IPv6
Normatively referenced by — RFC 6604: xNAME RCODE and Status Bits Clarification
Normatively referenced by — RFC 6975: Signaling Cryptographic Algorithm Understanding in DNS Security Extensions (DNSSEC)
Normatively referenced by — RFC 7123: Security Implications of IPv6 on IPv4 Networks
Normatively referenced by — RFC 7958: DNSSEC Trust Anchor Publication for the Root Zone