RFC 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors

This document describes a means for automated, authenticated, and authorized updating of DNSSEC "trust anchors". The method provides protection against N-1…

Read RFC 5011 on the RFC Editor

Outgoing relationships (6 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 3755: Legacy Resolver Compatibility for Delegation Signer (DS)
Informative reference — RFC 4986: Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover

Incoming relationships (9 related RFCs)

Normatively referenced by — RFC 7344: Automating DNSSEC Delegation Trust Maintenance
Normatively referenced by — RFC 7583: DNSSEC Key Rollover Timing Considerations
Normatively referenced by — RFC 7958: DNSSEC Trust Anchor Publication for the Root Zone
Normatively referenced by — RFC 6168: Requirements for Management of Name Servers for the DNS
Normatively referenced by — RFC 9718: DNSSEC Trust Anchor Publication for the Root Zone
Informatively referenced by — RFC 6781: DNSSEC Operational Practices, Version 2
Informatively referenced by — RFC 8111: Locator/ID Separation Protocol Delegated Database Tree (LISP-DDT)
Informatively referenced by — RFC 9526: Simple Provisioning of Public Names for Residential Networks
Informatively referenced by — RFC 9102: TLS DNSSEC Chain Extension