RFC 9904: DNSSEC Cryptographic Algorithm Recommendation Update Process

The DNSSEC protocol makes use of various cryptographic algorithms to provide authentication of DNS data and proof of nonexistence. To ensure interoperability…

Read RFC 9904 on the RFC Editor

Outgoing relationships (15 related RFCs)

Updates, Normative reference — RFC 9157: Revised IANA Considerations for DNSSEC
Obsoletes, Informative reference — RFC 8624: Algorithm Implementation Requirements and Usage Guidance for DNSSEC
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 4034: Resource Records for the DNS Security Extensions
Informative reference — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Informative reference — RFC 9364: DNS Security Extensions (DNSSEC)
Informative reference — RFC 4509: Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)
Informative reference — RFC 6781: DNSSEC Operational Practices, Version 2
Informative reference — RFC 5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
Informative reference — RFC 6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
Informative reference — RFC 5933: Use of GOST Signature Algorithms in DNSKEY and RRSIG Resource Records for DNSSEC
Informative reference — RFC 7583: DNSSEC Key Rollover Timing Considerations
Informative reference — RFC 8080: Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC

Incoming relationships (2 related RFCs)

Normatively referenced by — RFC 9905: Deprecating the Use of SHA-1 in DNSSEC Signature Algorithms
Normatively referenced by — RFC 9906: Deprecate Usage of ECC-GOST within DNSSEC