RFC 7673: Using DNS-Based Authentication of Named Entities (DANE) TLSA Records with SRV Records

The DNS-Based Authentication of Named Entities (DANE) specification (RFC 6698) describes how to use TLSA resource records secured by DNSSEC (RFC 4033) to…

Read RFC 7673 on the RFC Editor

Outgoing relationships (12 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 2782: A DNS RR for specifying the location of services (DNS SRV)
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normative reference — RFC 7218: Adding Acronyms to Simplify Conversations about DNS-Based Authentication of Named Entities (DANE)
Informative reference — RFC 5321: Simple Mail Transfer Protocol
Informative reference — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informative reference — RFC 3403: Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database
Informative reference — RFC 6186: Use of SRV Records for Locating Email Submission/Access Services

Incoming relationships (3 related RFCs)

Normatively referenced by — RFC 8765: DNS Push Notifications
Normatively referenced by — RFC 7712: Domain Name Associations (DNA) in the Extensible Messaging and Presence Protocol (XMPP)
Informatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance