RFC 6781: DNSSEC Operational Practices, Version 2

This document describes a set of practices for operating the DNS with security extensions (DNSSEC). The target audience is zone administrators deploying…

Read RFC 6781 on the RFC Editor

Outgoing relationships (21 related RFCs)

Obsoletes, Informative reference — RFC 4641: DNSSEC Operational Practices
Normative reference — RFC 1035: Domain names - implementation and specification
Normative reference — RFC 1034: Domain names - concepts and facilities
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Normative reference — RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)
Normative reference — RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
Informative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 4086: Randomness Requirements for Security
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 2308: Negative Caching of DNS Queries (DNS NCACHE)
Informative reference — RFC 3007: Secure Domain Name System (DNS) Dynamic Update
Informative reference — RFC 3766: Determining Strengths For Public Keys Used For Exchanging Symmetric Keys
Informative reference — RFC 1996: A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY)
Informative reference — RFC 1995: Incremental Zone Transfer in DNS
Informative reference — RFC 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors
Informative reference — RFC 6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
Informative reference — RFC 5910: Domain Name System (DNS) Security Extensions Mapping for the Extensible Provisioning Protocol (EPP)
Informative reference — RFC 5933: Use of GOST Signature Algorithms in DNSKEY and RRSIG Resource Records for DNSSEC
Informative reference — RFC 3375: Generic Registry-Registrar Protocol Requirements

Incoming relationships (12 related RFCs)

Normatively referenced by — RFC 9499: DNS Terminology
Normatively referenced by — RFC 7344: Automating DNSSEC Delegation Trust Maintenance
Normatively referenced by — RFC 7719: DNS Terminology
Normatively referenced by — RFC 7583: DNSSEC Key Rollover Timing Considerations
Normatively referenced by — RFC 8901: Multi-Signer DNSSEC Models
Normatively referenced by — RFC 7958: DNSSEC Trust Anchor Publication for the Root Zone
Normatively referenced by — RFC 7646: Definition and Use of DNSSEC Negative Trust Anchors
Informatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Informatively referenced by — RFC 9904: DNSSEC Cryptographic Algorithm Recommendation Update Process
Informatively referenced by — RFC 9210: DNS Transport over TCP - Operational Requirements
Informatively referenced by — RFC 9859: Generalized DNS Notifications
Informatively referenced by — RFC 10026: Operational Recommendations for DNSSEC Delegation Signer (DS) Automation