RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence

The Domain Name System Security (DNSSEC) Extensions introduced the NSEC resource record (RR) for authenticated denial of existence. This document introduces…

Read RFC 5155 on the RFC Editor

Outgoing relationships (18 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 1035: Domain names - implementation and specification
Normative reference — RFC 1034: Domain names - concepts and facilities
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 2434: Guidelines for Writing an IANA Considerations Section in RFCs
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 2136: Dynamic Updates in the Domain Name System (DNS UPDATE)
Normative reference — RFC 2181: Clarifications to the DNS Specification
Normative reference — RFC 2308: Negative Caching of DNS Queries (DNS NCACHE)
Normative reference — RFC 3597: Handling of Unknown DNS Resource Record (RR) Types
Normative reference — RFC 2929: Domain Name System (DNS) IANA Considerations
Informative reference — RFC 3833: Threat Analysis of the Domain Name System (DNS)
Informative reference — RFC 2898: PKCS #5: Password-Based Cryptography Specification Version 2.0
Informative reference — RFC 4592: The Role of Wildcards in the Domain Name System
Informative reference — RFC 2672: Non-Terminal DNS Name Redirection
Informative reference — RFC 4956: DNS Security (DNSSEC) Opt-In

Incoming relationships (32 related RFCs)

Updated by — RFC 6840: Clarifications and Implementation Notes for DNS Security (DNSSEC)
Updated by — RFC 9157: Revised IANA Considerations for DNSSEC
Updated by, Normatively referenced by — RFC 9276: Guidance for NSEC3 Parameter Settings
Updated by, Normatively referenced by — RFC 9077: NSEC and NSEC3: TTLs and Aggressive Use
Updated by, Normatively referenced by — RFC 6944: Applicability Statement: DNS Security (DNSSEC) DNSKEY Algorithm Implementation Status
Updated by, Normatively referenced by — RFC 9905: Deprecating the Use of SHA-1 in DNSSEC Signature Algorithms
Normatively referenced by — RFC 9499: DNS Terminology
Normatively referenced by — RFC 6672: DNAME Redirection in the DNS
Normatively referenced by — RFC 9364: DNS Security Extensions (DNSSEC)
Normatively referenced by — RFC 6781: DNSSEC Operational Practices, Version 2
Normatively referenced by — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Normatively referenced by — RFC 7719: DNS Terminology
Normatively referenced by — RFC 6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
Normatively referenced by — RFC 8901: Multi-Signer DNSSEC Models
Normatively referenced by — RFC 8659: DNS Certification Authority Authorization (CAA) Resource Record
Normatively referenced by — RFC 6844: DNS Certification Authority Authorization (CAA) Resource Record
Normatively referenced by — RFC 7958: DNSSEC Trust Anchor Publication for the Root Zone
Normatively referenced by — RFC 8766: Discovery Proxy for Multicast DNS-Based Service Discovery
Normatively referenced by — RFC 9526: Simple Provisioning of Public Names for Residential Networks
Normatively referenced by — RFC 6168: Requirements for Management of Name Servers for the DNS
Normatively referenced by — RFC 9102: TLS DNSSEC Chain Extension
Normatively referenced by — RFC 9563: SM2 Digital Signature Algorithm for DNSSEC
Normatively referenced by — RFC 9824: Compact Denial of Existence in DNSSEC
Informatively referenced by — RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
Informatively referenced by — RFC 7626: DNS Privacy Considerations
Informatively referenced by — RFC 5863: DomainKeys Identified Mail (DKIM) Development, Deployment, and Operations
Informatively referenced by — RFC 6841: A Framework for DNSSEC Policies and DNSSEC Practice Statements
Informatively referenced by — RFC 9103: DNS Zone Transfer over TLS
Informatively referenced by — RFC 8162: Using Secure DNS to Associate Certificates with Domain Names for S/MIME
Informatively referenced by — RFC 9904: DNSSEC Cryptographic Algorithm Recommendation Update Process
Informatively referenced by — RFC 9715: IP Fragmentation Avoidance in DNS over UDP
Informatively referenced by — RFC 6725: DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates