Secret Key Transaction Authentication for DNS (TSIG)

This specification has been revised 2 times since RFC 2845 (2000). Each document below formally obsoleted the one before it; the versions still in force are listed first.

Revision timeline

RFC 2845 (2000)
RFC 4635 (2006)
RFC 8945 (2020) ✓

Current version — implement against this

RFC 8945Secret Key Transaction Authentication for DNS (TSIG)Current
November 2020internet standard

Superseded versions — historical reference only

RFC 2845Secret Key Transaction Authentication for DNS (TSIG)Obsoleted
May 2000proposed standardreplaced by RFC8945
RFC 4635HMAC SHA (Hashed Message Authentication Code, Secure Hash Algorithm) TSIG Algorithm IdentifiersObsoleted
August 2006proposed standardreplaced by RFC8945

This lineage is derived automatically from the “obsoletes” relationships recorded in the public RFC Editor index — no editorial judgement is applied to the ordering. The most recent document in the chain is RFC 8945 (November 2020).