Domain Name System Security Extensions
The Domain Name System Security Extensions (DNSSEC) is a suite of Internet Engineering Task Force (IETF) specifications for securing certain kinds of information provided by the Domain Name System (DNS) as used on Internet Protocol (IP) networks. It is a set of extensions to DNS which provide to DNS clients (resolvers) origin authentication of DNS data, authenticated denial of existence, and data integrity, but not availability or confidentiality.[1]
- Domain Name System Security Extensions [EN] @ Wikipedia
- Domain Name System Security Extensions [DE] @ Wikipedia
Documentation
Request for Comments (RFC)
- 4033 - DNS Security Introduction and Requirements [EN]
- 4034 - Resource Records for the DNS Security Extensions [EN]
- 4035 - Protocol Modifications for the DNS Security Extensions [EN]
- 4398 - Storing Certificates in the Domain Name System (DNS) [EN]
- 5155 - DNS Security (DNSSEC) Hashed Authenticated Denial of Existence [EN]
- 5702 - Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC [EN]
- 5933 - Use of GOST Signature Algorithms in DNSKEY and RRSIG Resource Records for DNSSEC [EN]