RFC 9824: Compact Denial of Existence in DNSSEC

This document describes a technique to generate a signed DNS response on demand for a nonexistent name by claiming that the name exists but doesn't have any…

Read RFC 9824 on the RFC Editor

Outgoing relationships (17 related RFCs)

Updates, Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Updates, Normative reference — RFC 4035: Protocol Modifications for the DNS Security Extensions
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Normative reference — RFC 6891: Extension Mechanisms for DNS (EDNS(0))
Normative reference — RFC 6895: Domain Name System (DNS) IANA Considerations
Normative reference — RFC 9364: DNS Security Extensions (DNSSEC)
Normative reference — RFC 3225: Indicating Resolver Support of DNSSEC
Normative reference — RFC 8914: Extended DNS Errors
Normative reference — RFC 4470: Minimally Covering NSEC Records and DNSSEC On-line Signing
Informative reference — RFC 9499: DNS Terminology
Informative reference — RFC 8305: Happy Eyeballs Version 2: Better Connectivity Using Concurrency
Informative reference — RFC 8198: Aggressive Use of DNSSEC-Validated Cache
Informative reference — RFC 8020: NXDOMAIN: There Really Is Nothing Underneath
Informative reference — RFC 7129: Authenticated Denial of Existence in the DNS