5. IANA Considerations (IANA 考虑)
IANA 已按如下方式更新了 "Digest Algorithms" 注册表 [DS-IANA] [RFC9904] 中的 SHA-1 (1) 条目,并将本文档添加为该条目的参考文献:
- Value: 1
- Description: SHA-1
- Use for DNSSEC Delegation: MUST NOT
- Use for DNSSEC Validation: RECOMMENDED
- Implement for DNSSEC Delegation: MUST NOT
- Implement for DNSSEC Validation: MUST
IANA 已按如下方式更新了 "DNS Security Algorithm Numbers" 注册表 [DNSKEY-IANA] [RFC9904] 中的 RSASHA1 (5) 和 RSASHA1-NSEC3-SHA1 (7) 算法条目,并将本文档添加为这些条目的参考文献:
算法 5:
- Number: 5
- Description: RSA/SHA-1
- Mnemonic: RSASHA1
- Zone Signing: Y
- Trans. Sec.: Y
- Use for DNSSEC Signing: MUST NOT
- Use for DNSSEC Validation: RECOMMENDED
- Implement for DNSSEC Signing: NOT RECOMMENDED
- Implement for DNSSEC Validation: MUST
算法 7:
- Number: 7
- Description: RSASHA1-NSEC3-SHA1
- Mnemonic: RSASHA1-NSEC3-SHA1
- Zone Signing: Y
- Trans. Sec.: Y
- Use for DNSSEC Signing: MUST NOT
- Use for DNSSEC Validation: RECOMMENDED
- Implement for DNSSEC Signing: NOT RECOMMENDED
- Implement for DNSSEC Validation: MUST