Skip to main content

5. IANA Considerations (IANA 考虑)

IANA 已按如下方式更新了 "Digest Algorithms" 注册表 [DS-IANA] [RFC9904] 中的 SHA-1 (1) 条目,并将本文档添加为该条目的参考文献:

  • Value: 1
  • Description: SHA-1
  • Use for DNSSEC Delegation: MUST NOT
  • Use for DNSSEC Validation: RECOMMENDED
  • Implement for DNSSEC Delegation: MUST NOT
  • Implement for DNSSEC Validation: MUST

IANA 已按如下方式更新了 "DNS Security Algorithm Numbers" 注册表 [DNSKEY-IANA] [RFC9904] 中的 RSASHA1 (5) 和 RSASHA1-NSEC3-SHA1 (7) 算法条目,并将本文档添加为这些条目的参考文献:

算法 5:

  • Number: 5
  • Description: RSA/SHA-1
  • Mnemonic: RSASHA1
  • Zone Signing: Y
  • Trans. Sec.: Y
  • Use for DNSSEC Signing: MUST NOT
  • Use for DNSSEC Validation: RECOMMENDED
  • Implement for DNSSEC Signing: NOT RECOMMENDED
  • Implement for DNSSEC Validation: MUST

算法 7:

  • Number: 7
  • Description: RSASHA1-NSEC3-SHA1
  • Mnemonic: RSASHA1-NSEC3-SHA1
  • Zone Signing: Y
  • Trans. Sec.: Y
  • Use for DNSSEC Signing: MUST NOT
  • Use for DNSSEC Validation: RECOMMENDED
  • Implement for DNSSEC Signing: NOT RECOMMENDED
  • Implement for DNSSEC Validation: MUST