RFC 4033 - DNS Security Introduction and Requirements
Publication Date: March 2005
Status: Standards Track
Authors: R. Arends, R. Austein, M. Larson, D. Massey, S. Rose
Abstract
The Domain Name System Security Extensions (DNSSEC) add data origin authentication and data integrity to the Domain Name System. This document introduces these extensions and describes their capabilities and limitations. This document also discusses the services that the DNS security extensions do and do not provide. Last, this document describes the interrelationships between the documents that collectively describe DNSSEC.
Status of This Memo
This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited.
Copyright Notice
Copyright (C) The Internet Society (2005).
Table of Contents
- 1. Introduction
- 2. Definitions of Important DNSSEC Terms
- 3. Services Provided by DNS Security
- 3.1 Data Origin Authentication and Data Integrity
- 3.2 Authenticating Name and Type Non-Existence
- 4. Services Not Provided by DNS Security
- 5. Scope of the DNSSEC Document Set and Last Hop Issues
- 6. Resolver Considerations
- 7. Stub Resolver Considerations
- 8. Zone Considerations
- 8.1 TTL Values vs. RRSIG Validity Period
- 8.2 New Temporal Dependency Issues for Zones
- 9. Name Server Considerations
- 10. DNS Security Document Family
- 11. IANA Considerations
- 12. Security Considerations
- 13. Acknowledgements
- 14. References
- 14.1 Normative References
- 14.2 Informative References
Authors' Addresses
Roy Arends
Telematica Instituut
Email: <[email protected]>
Rob Austein
Internet Systems Consortium
Email: <[email protected]>
Matt Larson
VeriSign, Inc.
Email: <[email protected]>
Dan Massey
Colorado State University
Email: <[email protected]>
Scott Rose
National Institute for Standards and Technology
Email: <[email protected]>
Related Resources
- Official Text: RFC 4033
- Official Page: RFC 4033 DataTracker
- Obsoletes: RFC 2535, 3008, 3090, 3445, 3655, 3658, 3755, 3757, 3845
- Updates: RFC 1034, 1035, 2136, 2181, 2308, 3007, 3225, 3226, 3597