RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)

This document specifies how to use the SHA-256 digest type in DNS Delegation Signer (DS) Resource Records (RRs). DS records, when stored in a parent zone,…

Read RFC 4509 on the RFC Editor

Outgoing relationships (4 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions

Incoming relationships (12 related RFCs)

Normatively referenced by — RFC 9364: DNS Security Extensions (DNSSEC)
Normatively referenced by — RFC 6781: DNSSEC Operational Practices, Version 2
Normatively referenced by — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Normatively referenced by — RFC 6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
Normatively referenced by — RFC 7958: DNSSEC Trust Anchor Publication for the Root Zone
Normatively referenced by — RFC 6168: Requirements for Management of Name Servers for the DNS
Normatively referenced by — RFC 6944: Applicability Statement: DNS Security (DNSSEC) DNSKEY Algorithm Implementation Status
Normatively referenced by — RFC 9563: SM2 Digital Signature Algorithm for DNSSEC
Informatively referenced by — RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
Informatively referenced by — RFC 4641: DNSSEC Operational Practices
Informatively referenced by — RFC 9904: DNSSEC Cryptographic Algorithm Recommendation Update Process
Informatively referenced by — RFC 6725: DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates