"Interoperable Domain Name System (DNS) Server Cookies" - Ondrej Sury, Willem...
2019-11-04, rev -01: DNS cookies, as specified in RFC 7873, are a lightweight DNS transaction security mechanism that provides limited protection to DNS servers and clients against a variety of...
View Article"A Common Operational Problem in DNS Servers - Failure To Communicate." -...
2019-11-04, rev -14: The DNS is a query / response protocol. Failing to respond to queries, or responding incorrectly, causes both immediate operational problems and long term problems with protocol...
View Article"YANG Types for DNS Classes and Resource Record Types" - Ladislav Lhotka,...
2019-06-27, rev -02: This document contains the initial revision of the YANG module iana- dns-class-rr-type that contains derived types reflecting two IANA registries: DNS CLASSes and Resource Record...
View Article"Running a Root Server Local to a Resolver" - Warren Kumari, Paul Hoffman
2019-11-17, rev -06: Some DNS recursive resolvers have longer-than-desired round-trip times to the closest DNS root server such as during a network attack. Some DNS recursive resolver operators want to...
View Article"Interoperable Domain Name System (DNS) Server Cookies" - Ondrej Sury, Willem...
2019-11-18, rev -02: DNS cookies, as specified in RFC 7873, are a lightweight DNS transaction security mechanism that provides limited protection to DNS servers and clients against a variety of...
View Article"Message Digest for DNS Zones" - Duane Wessels, Piet Barber, Matt Weinberg,...
2019-12-03, rev -03: This document describes a protocol and new DNS Resource Record that can be used to provide a cryptographic message digest over DNS zone data. The ZONEMD Resource Record conveys the...
View Article"Serving Stale Data to Improve DNS Resiliency" - David Lawrence, Warren...
2019-12-09, rev -10: This draft defines a method (serve-stale) for recursive resolvers to use stale DNS data to avoid outages when authoritative nameservers cannot be reached to refresh expired data....
View Article"YANG Types for DNS Classes and Resource Record Types" - Ladislav Lhotka,...
2019-12-17, rev -00: This document introduces the YANG module "iana-dns-class-rr-type" that contains derived types reflecting two IANA registries: DNS CLASSes and Resource Record (RR) TYPEs. These YANG...
View Article"Extended DNS Errors" - Warren Kumari, Evan Hunt, Roy Arends, Wes Hardaker,...
2019-12-18, rev -13: This document defines an extensible method to return additional information about the cause of DNS errors. Though created primarily to extend SERVFAIL to provide additional...
View Article"Running a Root Server Local to a Resolver" - Warren Kumari, Paul Hoffman
2020-01-12, rev -07: Some DNS recursive resolvers have longer-than-desired round-trip times to the closest DNS root server such as during a network attack. Some DNS recursive resolver operators want to...
View Article"Extended DNS Errors" - Warren Kumari, Evan Hunt, Roy Arends, Wes Hardaker,...
2020-01-15, rev -14: This document defines an extensible method to return additional information about the cause of DNS errors. Though created primarily to extend SERVFAIL to provide additional...
View Article"Terminology for DNS Transports and Location" - Paul Hoffman
2020-02-11, rev -01: This document adds terms and abbreviations to "DNS Terminology" (RFC 8499) that relate to DNS running over various transports, as well as terms and abbreviations for DNS resolution...
View Article"DNS Resolver Information Self-publication" - Puneet Sood, Roy Arends, Paul...
2020-02-11, rev -01: This document describes methods for DNS resolvers to self-publish information about themselves, such as whether they perform DNSSEC validation or are available over transports...
View Article"Secret Key Transaction Authentication for DNS (TSIG)" - Francis Dupont,...
2020-02-20, rev -07: This document describes a protocol for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming from an...
View Article"Message Digest for DNS Zones" - Duane Wessels, Piet Barber, Matt Weinberg,...
2020-02-24, rev -04: This document describes a protocol and new DNS Resource Record that can be used to provide a cryptographic message digest over DNS zone data. The ZONEMD Resource Record conveys the...
View Article"Running a Root Server Local to a Resolver" - Warren Kumari, Paul Hoffman
2020-03-02, rev -09: Some DNS recursive resolvers have longer-than-desired round-trip times to the closest DNS root server; those resolvers may have difficulty getting responses from the root servers,...
View Article"Running a Root Server Local to a Resolver" - Warren Kumari, Paul Hoffman
2020-03-05, rev -10: Some DNS recursive resolvers have longer-than-desired round-trip times to the closest DNS root server; those resolvers may have difficulty getting responses from the root servers,...
View Article"DNS Query Name Minimisation to Improve Privacy" - Stephane Bortzmeyer, Ralph...
2020-03-06, rev -03: This document describes techniques called "QNAME minimisation" to improve DNS privacy, where the DNS resolver no longer always sends the full original QNAME to the upstream name...
View Article"Multi Signer DNSSEC models" - Shumon Huque, Pallavi Aras, John Dickinson,...
2020-03-08, rev -04: Many enterprises today employ the service of multiple DNS providers to distribute their authoritative DNS service. Deploying DNSSEC in such an environment may present some...
View Article"A Common Operational Problem in DNS Servers - Failure To Communicate." -...
2020-03-08, rev -16: The DNS is a query / response protocol. Failing to respond to queries, or responding incorrectly, causes both immediate operational problems and long term problems with protocol...
View Article