"Extended DNS Errors" - Warren Kumari, Evan Hunt, Roy Arends, Wes Hardaker,...
2020-05-05, rev -16: This document defines an extensible method to return additional information about the cause of DNS errors. Though created primarily to extend SERVFAIL to provide additional...
View Article"DNS Transport over TCP - Operational Requirements" - John Kristoff, Duane...
2020-05-06, rev -06: This document encourages the practice of permitting DNS messages to be carried over TCP on the Internet. This includes both DNS over unencrypted TCP, as well as over an encrypted...
View Article"YANG Types for DNS Classes and Resource Record Types" - Ladislav Lhotka,...
2020-05-15, rev -01: This document introduces the YANG module "iana-dns-class-rr-type" that contains derived types reflecting two IANA registries: DNS CLASSes and Resource Record (RR) TYPEs. These YANG...
View Article"Interoperable Domain Name System (DNS) Server Cookies" - Ondrej Sury, Willem...
2020-05-20, rev -03: DNS cookies, as specified in RFC 7873, are a lightweight DNS transaction security mechanism that provides limited protection to DNS servers and clients against a variety of...
View Article"Recommendations for DNSSEC Resolvers Operators" - Daniel Migault, Edward...
2020-05-21, rev -00: The DNS Security Extensions define a process for validating received data and assert them authentic and complete as opposed to forged.
View Article"Glue In DNS Referral Responses Is Not Optional" - Mark Andrews
2020-06-03, rev -00: The DNS uses glue records to allow iterative clients to find the addresses of nameservers that live within the delegated zone. Glue records are expected to be returned as part of a...
View Article"DNS Catalog Zones" - Peter van Dijk, Libor Peltan, Ondrej Sury, Willem...
2020-06-03, rev -00: This document describes a method for automatic DNS zone provisioning among DNS primary and secondary nameservers by storing and transferring the catalog of zones to be provisioned...
View Article"Secret Key Transaction Authentication for DNS (TSIG)" - Francis Dupont,...
2020-07-10, rev -09: This document describes a protocol for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates to a DNS zone as...
View Article"The DELEGATION_ONLY DNSKEY flag" - Paul Wouters, Wes Hardaker
2020-07-13, rev -01: This document introduces a new DNSKEY flag called DELEGATION_ONLY that indicates that this zone will only produce delegation responses for data outside of its own apex (or...
View Article"Service binding and parameter specification via the DNS (DNS SVCB and HTTPS...
2020-07-13, rev -01: This document specifies the "SVCB" and "HTTPS" DNS resource record (RR) types to facilitate the lookup of information needed to make connections to network services, such as for...
View Article"DNS TIMEOUT Resource Record" - Tom Pusateri, Tim Wattenberg
2020-07-25, rev -01: This specification defines a new DNS TIMEOUT resource record (RR) that associates a lifetime with one or more zone resource records. It is intended to be used to transfer resource...
View Article"Terminology for DNS Transports and Location" - Paul Hoffman
2020-08-03, rev -02: This document adds terms and abbreviations to "DNS Terminology" (RFC 8499) that relate to DNS running over various transports, as well as terms and abbreviations for DNS resolution...
View Article"Delegation Revalidation by DNS Resolvers" - Shumon Huque, Paul Vixie, Ralph...
2020-09-08, rev -00: This document recommends improved DNS [RFC1034] [RFC1035] resolver behavior with respect to the processing of Name Server (NS) resource record sets (RRset) during iterative...
View Article"Fragmentation Avoidance in DNS" - Kazunori Fujiwara, Paul Vixie
2020-09-15, rev -02: EDNS0 enables a DNS server to send large responses using UDP and is widely deployed. Path MTU discovery remains widely undeployed due to security issues, and IP fragmentation has...
View Article"Use of GOST 2012 Signature Algorithms in DNSKEY and RRSIG Resource Records...
2020-09-28, rev -02: This document describes how to produce digital signatures and hash functions using the GOST R 34.10-2012 and GOST R 34.11-2012 algorithms for DNSKEY, RRSIG, and DS resource...
View Article"DNS Query Name Minimisation to Improve Privacy" - Stephane Bortzmeyer, Ralph...
2020-09-28, rev -06: This document describes techniques called "QNAME minimisation" to improve DNS privacy, where the DNS resolver no longer always sends the full original QNAME to the upstream name...
View Article"Message Digest for DNS Zones" - Duane Wessels, Piet Barber, Matt Weinberg,...
2020-09-29, rev -12: This document describes a protocol and new DNS Resource Record that provides a cryptographic message digest over DNS zone data. The ZONEMD Resource Record conveys the digest data...
View Article"Top-level Domains for Private Internets" - Roy Arends, Ed Lewis
2020-06-08, rev -02: There are no defined private-use namespaces in the Domain Name System (DNS). For a domain name to be considered private-use, it needs to be future-proof in that its top-level...
View Article
