RFC 4956: DNS Security (DNSSEC) Opt-In

In the DNS security (DNSSEC) extensions, delegations to unsigned subzones are cryptographically secured. Maintaining this cryptography is not always practical…

Read RFC 4956 on the RFC Editor

Outgoing relationships (11 related RFCs)

Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 3655: Redefinition of DNS Authenticated Data (AD) bit
Normative reference — RFC 4955: DNS Security (DNSSEC) Experiments
Informative reference — RFC 1035: Domain names - implementation and specification
Informative reference — RFC 2181: Clarifications to the DNS Specification
Informative reference — RFC 3007: Secure Domain Name System (DNS) Dynamic Update
Informative reference — RFC 3833: Threat Analysis of the Domain Name System (DNS)
Informative reference — RFC 3225: Indicating Resolver Support of DNSSEC
Informative reference — RFC 3090: DNS Security Extension Clarification on Zone Status

Incoming relationships (4 related RFCs)

Informatively referenced by — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Informatively referenced by — RFC 9499: DNS Terminology
Informatively referenced by — RFC 7719: DNS Terminology
Informatively referenced by — RFC 7129: Authenticated Denial of Existence in the DNS