RFC 9103: DNS Zone Transfer over TLS

DNS zone transfers are transmitted in cleartext, which gives attackers the opportunity to collect the content of a zone by eavesdropping on network…

Read RFC 9103 on the RFC Editor

Outgoing relationships (22 related RFCs)

Updates, Normative reference — RFC 1995: Incremental Zone Transfer in DNS
Updates, Normative reference — RFC 7766: DNS Transport over TCP - Implementation Requirements
Updates, Normative reference — RFC 5936: DNS Zone Transfer Protocol (AXFR)
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 1035: Domain names - implementation and specification
Normative reference — RFC 1034: Domain names - concepts and facilities
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 6973: Privacy Considerations for Internet Protocols
Normative reference — RFC 7858: Specification for DNS over Transport Layer Security (TLS)
Normative reference — RFC 8499: DNS Terminology
Normative reference — RFC 2931: DNS Request and Transaction Signatures ( SIG(0)s )
Normative reference — RFC 1996: A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY)
Normative reference — RFC 8914: Extended DNS Errors
Normative reference — RFC 8310: Usage Profiles for DNS over TLS and DNS over DTLS
Normative reference — RFC 8945: Secret Key Transaction Authentication for DNS (TSIG)
Normative reference — RFC 7828: The edns-tcp-keepalive EDNS0 Option
Informative reference — RFC 8484: DNS Queries over HTTPS (DoH)
Informative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Informative reference — RFC 6891: Extension Mechanisms for DNS (EDNS(0))
Informative reference — RFC 1982: Serial Number Arithmetic
Informative reference — RFC 8976: Message Digest for DNS Zones

Incoming relationships (3 related RFCs)

Normatively referenced by — RFC 9526: Simple Provisioning of Public Names for Residential Networks
Normatively referenced by — RFC 9527: DHCPv6 Options for the Homenet Naming Authority
Informatively referenced by — RFC 9499: DNS Terminology