RFC 7873: Domain Name System (DNS) Cookies

DNS Cookies are a lightweight DNS transaction security mechanism that provides limited protection to DNS servers and clients against a variety of increasingly…

Read RFC 7873 on the RFC Editor

Outgoing relationships (15 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 1035: Domain names - implementation and specification
Normative reference — RFC 4086: Randomness Requirements for Security
Normative reference — RFC 6891: Extension Mechanisms for DNS (EDNS(0))
Normative reference — RFC 7120: Early IANA Allocation of Standards Track Code Points
Informative reference — RFC 4033: DNS Security Introduction and Requirements
Informative reference — RFC 4034: Resource Records for the DNS Security Extensions
Informative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Informative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Informative reference — RFC 3022: Traditional IP Network Address Translator (Traditional NAT)
Informative reference — RFC 2845: Secret Key Transaction Authentication for DNS (TSIG)
Informative reference — RFC 2931: DNS Request and Transaction Signatures ( SIG(0)s )
Informative reference — RFC 2930: Secret Key Establishment for DNS (TKEY RR)
Informative reference — RFC 5452: Measures for Making DNS More Resilient against Forged Answers
Informative reference — RFC 4966: Reasons to Move the Network Address Translator - Protocol Translator (NAT-PT) to Historic Status

Incoming relationships (9 related RFCs)

Updated by, Normatively referenced by — RFC 9018: Interoperable Domain Name System (DNS) Server Cookies
Normatively referenced by — RFC 7901: CHAIN Query Requests in DNS
Normatively referenced by — RFC 9609: Initializing a DNS Resolver with Priming Queries
Informatively referenced by — RFC 7929: DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP
Informatively referenced by — RFC 8162: Using Secure DNS to Associate Certificates with Domain Names for S/MIME
Informatively referenced by — RFC 9567: DNS Error Reporting
Informatively referenced by — RFC 9520: Negative Caching of DNS Resolution Failures
Informatively referenced by — RFC 8906: A Common Operational Problem in DNS Servers: Failure to Communicate
Informatively referenced by — RFC 8932: Recommendations for DNS Privacy Service Operators