Skip to main content

RFC 9975 - Clarifications on CDS/CDNSKEY and CSYNC Consistency

  • Status: Proposed Standard
  • Published: May 2026
  • Stream: IETF
  • Updates: RFC7344, RFC7477
  • Errata: No Errata

Abstract​

Maintenance of DNS delegations requires occasional changes of the DS and NS record sets on the parent side of the delegation. For DS records, RFC 7344 provides automation by allowing the child to publish CDS and/or CDNSKEY records that hold prospective DS parameters for the parent to ingest. Similarly, RFC 7477 specifies CSYNC records to indicate a desired update of the delegation's NS and glue records.

This document specifies the conditions under which target states expressed via CDS/CDNSKEY and CSYNC records are considered consistent. Parent-side entities accepting such records from the child have to ensure that update requests retrieved from different authoritative nameservers satisfy these consistency requirements before taking action.

This document updates RFCs 7344 and 7477.

Last updated on