"DNS Query Name Minimisation to Improve Privacy" - Stephane Bortzmeyer, Ralph...
2020-03-09, rev -04: This document describes techniques called "QNAME minimisation" to improve DNS privacy, where the DNS resolver no longer always sends the full original QNAME to the upstream name...
View Article"Service binding and parameter specification via the DNS (DNS SVCB and...
2020-03-09, rev -02: This document specifies the "SVCB" and "HTTPSSVC" DNS resource record types to facilitate the lookup of information needed to make connections for origin resources, such as for...
View Article"Message Digest for DNS Zones" - Duane Wessels, Piet Barber, Matt Weinberg,...
2020-03-09, rev -05: This document describes a protocol and new DNS Resource Record that can be used to provide a cryptographic message digest over DNS zone data. The ZONEMD Resource Record conveys the...
View Article"A Common Operational Problem in DNS Servers - Failure To Communicate." -...
2020-03-11, rev -17: The DNS is a query / response protocol. Failing to respond to queries, or responding incorrectly, causes both immediate operational problems and long term problems with protocol...
View Article"Running a Root Server Local to a Resolver" - Warren Kumari, Paul Hoffman
2020-03-13, rev -12: Some DNS recursive resolvers have longer-than-desired round-trip times to the closest DNS root server; those resolvers may have difficulty getting responses from the root servers,...
View Article"A Common Operational Problem in DNS Servers - Failure To Communicate" - Mark...
2020-03-22, rev -18: The DNS is a query / response protocol. Failing to respond to queries, or responding incorrectly, causes both immediate operational problems and long term problems with protocol...
View Article"A Common Operational Problem in DNS Servers - Failure To Communicate" - Mark...
2020-04-07, rev -20: The DNS is a query / response protocol. Failing to respond to queries, or responding incorrectly, causes both immediate operational problems and long term problems with protocol...
View Article"Message Digest for DNS Zones" - Duane Wessels, Piet Barber, Matt Weinberg,...
2020-04-08, rev -06: This document describes a protocol and new DNS Resource Record that can be used to provide a cryptographic message digest over DNS zone data. The ZONEMD Resource Record conveys the...
View Article"A Common Operational Problem in DNS Servers - Failure To Communicate" - Mark...
2020-04-13, rev -21: The DNS is a query / response protocol. Failing to respond to queries, or responding incorrectly, causes both immediate operational problems and long term problems with protocol...
View Article"A Common Operational Problem in DNS Servers - Failure To Communicate" - Mark...
2020-04-14, rev -22: The DNS is a query / response protocol. Failing to respond to queries, or responding incorrectly, causes both immediate operational problems and long term problems with protocol...
View Article"A Common Operational Problem in DNS Servers - Failure To Communicate" - Mark...
2020-04-16, rev -23: The DNS is a query / response protocol. Failing to respond to queries, or responding incorrectly, causes both immediate operational problems and long term problems with protocol...
View Article"Multi Signer DNSSEC models" - Shumon Huque, Pallavi Aras, John Dickinson,...
2020-04-19, rev -05: Many enterprises today employ the service of multiple DNS providers to distribute their authoritative DNS service. Deploying DNSSEC in such an environment may present some...
View Article"Extended DNS Errors" - Warren Kumari, Evan Hunt, Roy Arends, Wes Hardaker,...
2020-04-24, rev -15: This document defines an extensible method to return additional information about the cause of DNS errors. Though created primarily to extend SERVFAIL to provide additional...
View Article"Fragmentation Avoidance in DNS" - Kazunori Fujiwara, Paul Vixie
2020-04-12, rev -03: Path MTU discovery remains widely undeployed due to security issues, and IP fragmentation has exposed weaknesses in application protocols. Currently, DNS is known to be the largest...
View Article"Message Digest for DNS Zones" - Duane Wessels, Piet Barber, Matt Weinberg,...
2020-04-28, rev -07: This document describes a protocol and new DNS Resource Record that can be used to provide a cryptographic message digest over DNS zone data. The ZONEMD Resource Record conveys the...
View Article"Secret Key Transaction Authentication for DNS (TSIG)" - Francis Dupont,...
2020-05-04, rev -08: This document describes a protocol for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates to a DNS zone as...
View Article"Extended DNS Errors" - Warren Kumari, Evan Hunt, Roy Arends, Wes Hardaker,...
2020-05-05, rev -16: This document defines an extensible method to return additional information about the cause of DNS errors. Though created primarily to extend SERVFAIL to provide additional...
View Article"The DELEGATION_ONLY DNSKEY flag" - Paul Wouters, Wes Hardaker
2020-05-06, rev -00: This document introduces a new DNSKEY flag called DELEGATION_ONLY that indicates that the particular zone will never sign zone data across a label. That is, every label (dot)...
View Article"DNS Transport over TCP - Operational Requirements" - John Kristoff, Duane...
2020-05-06, rev -06: This document encourages the practice of permitting DNS messages to be carried over TCP on the Internet. This includes both DNS over unencrypted TCP, as well as over an encrypted...
View Article"Recommendations for DNSSEC Resolvers Operators" - Daniel Migault, Edward...
2020-04-29, rev -09: The DNS Security Extensions define a process for validating received data and assert them authentic and complete as opposed to forged.
View Article