"DNS Transport over TCP - Operational Requirements" - John Kristoff, Duane...
2019-06-24, rev -04: This document encourages the practice of permitting DNS messages to be carried over TCP on the Internet. It also considers the consequences with this form of DNS communication and...
View Article"Secret Key Transaction Authentication for DNS (TSIG)" - Francis Dupont,...
2019-07-07, rev -05: This document describes a protocol for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming from an...
View Article"Address-specific DNS aliases (ANAME)" - Tony Finch, Evan Hunt, Peter van...
2019-07-08, rev -04: This document defines the "ANAME" DNS RR type, to provide similar functionality to CNAME, but only for address queries. Unlike CNAME, an ANAME can coexist with other record types....
View Article"Multi Signer DNSSEC models" - Shumon Huque, Pallavi Aras, John Dickinson,...
2019-07-22, rev -03: Many enterprises today employ the service of multiple DNS providers to distribute their authoritative DNS service. Deploying DNSSEC in such an environment may present some...
View Article"Terminology for DNS Transports and Location" - Paul Hoffman
2019-08-15, rev -00: This document adds terms and abbreviations to "DNS Terminology" (RFC 8499) that relate to DNS running over various transports, as well as terms and abbreviations for DNS resolution...
View Article"DNS Resolver Information Self-publication" - Puneet Sood, Roy Arends, Paul...
2019-08-19, rev -00: This document describes methods for DNS resolvers to self-publish information about themselves, such as whether they perform DNSSEC validation or are available over transports...
View Article"The ALT Special Use Top Level Domain" - Warren Kumari, Andrew Sullivan
2019-08-23, rev -12: This document reserves a string (ALT) to be used as a TLD label in non-DNS contexts. It also provides advice and guidance to developers developing alternative namespaces.
View Article"Running a Root Server Local to a Resolver" - Warren Kumari, Paul Hoffman
2019-08-26, rev -05: Some DNS recursive resolvers have longer-than-desired round-trip times to the closest DNS root server such as during a network attack. Some DNS recursive resolver operators want to...
View Article"Message Digest for DNS Zones" - Duane Wessels, Piet Barber, Matt Weinberg,...
2019-09-05, rev -01: This document describes an experimental protocol and new DNS Resource Record that can be used to provide a message digest over DNS zone data. The ZONEMD Resource Record conveys the...
View Article"Interoperable Domain Name System (DNS) Server Cookies" - Ondrej Sury, Willem...
2019-09-09, rev -00: DNS cookies, as specified in RFC 7873, are a lightweight DNS transaction security mechanism that provides limited protection to DNS servers and clients against a variety of...
View Article"Service binding and parameter specification via the DNS (DNS SVCB and...
2019-09-23, rev -00: This document specifies the "SVCB" and "HTTPSSVC" DNS resource record types to facilitate the lookup of information needed to make connections for origin resources, such as for...
View Article"Extended DNS Errors" - Warren Kumari, Evan Hunt, Roy Arends, Wes Hardaker,...
2019-10-01, rev -12: This document defines an extensible method to return additional information about the cause of DNS errors. Though created primarily to extend SERVFAIL to provide additional...
View Article"Moving DNSSEC Lookaside Validation (DLV) to Historic Status" - Willem...
2019-10-09, rev -01: This document obsoletes DNSSEC lookaside validation (DLV) and reclassifies RFCs 4431 and 5074 as Historic. Furthermore, this document updates RFC 6698 by excluding the DLV resource...
View Article"Serving Stale Data to Improve DNS Resiliency" - David Lawrence, Warren...
2019-10-24, rev -09: This draft defines a method (serve-stale) for recursive resolvers to use stale DNS data to avoid outages when authoritative nameservers cannot be reached to refresh expired data....
View Article"Message Digest for DNS Zones" - Duane Wessels, Piet Barber, Matt Weinberg,...
2019-10-28, rev -02: This document describes an experimental protocol and new DNS Resource Record that can be used to provide a message digest over DNS zone data. The ZONEMD Resource Record conveys the...
View Article"Service binding and parameter specification via the DNS (DNS SVCB and...
2019-10-31, rev -00: This document specifies the "SVCB" and "HTTPSSVC" DNS resource record types to facilitate the lookup of information needed to make connections for origin resources, such as for...
View Article"Moving DNSSEC Lookaside Validation (DLV) to Historic Status" - Willem...
2019-10-31, rev -02: This document obsoletes DNSSEC lookaside validation (DLV) and reclassifies RFCs 4431 and 5074 as Historic. Furthermore, this document updates RFC 6698 by excluding the DLV resource...
View Article"Secret Key Transaction Authentication for DNS (TSIG)" - Francis Dupont,...
2019-11-01, rev -06: This document describes a protocol for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming from an...
View Article"DNS Transport over TCP - Operational Requirements" - John Kristoff, Duane...
2019-11-02, rev -05: This document encourages the practice of permitting DNS messages to be carried over TCP on the Internet. This includes both DNS over unencrypted TCP, as well as over an encrypted...
View Article"Service binding and parameter specification via the DNS (DNS SVCB and...
2019-11-04, rev -01: This document specifies the "SVCB" and "HTTPSSVC" DNS resource record types to facilitate the lookup of information needed to make connections for origin resources, such as for...
View Article