RFC 8162: Using Secure DNS to Associate Certificates with Domain Names for S/MIME

This document describes how to use secure DNS to associate an S/MIME user's certificate with the intended domain name, similar to the way that DNS-Based…

Read RFC 8162 on the RFC Editor

Outgoing relationships (20 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 5751: Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.2 Message Specification
Normative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normative reference — RFC 5754: Using SHA2 Algorithms with Cryptographic Message Syntax
Normative reference — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Informative reference — RFC 5322: Internet Message Format
Informative reference — RFC 5321: Simple Mail Transfer Protocol
Informative reference — RFC 7258: Pervasive Monitoring Is an Attack
Informative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Informative reference — RFC 6672: DNAME Redirection in the DNS
Informative reference — RFC 6530: Overview and Framework for Internationalized Email
Informative reference — RFC 7873: Domain Name System (DNS) Cookies
Informative reference — RFC 4262: X.509 Certificate Extension for Secure/Multipurpose Internet Mail Extensions (S/MIME) Capabilities
Informative reference — RFC 7218: Adding Acronyms to Simplify Conversations about DNS-Based Authentication of Named Entities (DANE)
Informative reference — RFC 7929: DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP

Incoming relationships (2 related RFCs)

Informatively referenced by — RFC 9787: Guidance on End-to-End Email Security
Informatively referenced by — RFC 9788: Header Protection for Cryptographically Protected Email