metasystema.org
ObsoletedPROPOSED STANDARDIETF stream

RFC 3757: Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag

This RFC has been replaced. Do not implement against it for new work — it was formally obsoleted by RFC 4033, RFC 4034, RFC 4035.

Current document in this lineage: RFC 4033 — DNS Security Introduction and Requirements; RFC 4034 — Resource Records for the DNS Security Extensions; RFC 4035 — Protocol Modifications for the DNS Security Extensions

In plain English — editorial summary, not part of the RFC

With the Delegation Signer (DS) resource record (RR), the concept of a public key acting as a secure entry point (SEP) has been introduced. During exchanges of public keys with the parent there is a need to differentiate SEP keys from other public keys in the Domain Name System KEY (DNSKEY) resource record set. A flag bit in the DNSKEY RR is defined to indicate that DNSKEY is to be used as a SEP. The flag bit is intended to assist in operational procedures to correctly generate DS resource records, or to indicate what DNSKEYs are intended for static configuration. The flag bit is not to be used in the DNS verification protocol. This document updates RFC 2535 and RFC 3755. [STANDARDS-TRACK]

Document record

Document ID
RFC3757
Published
May 2004
Authors
O. Kolkman; J. Schlyter; E. Lewis
Status
PROPOSED STANDARD
Stream
IETF
Area
int
Pages
8
Also known as
—
Obsoleted by:
RFC 4033, RFC 4034, RFC 4035
Updates:
RFC 2535, RFC 3755

Topics

Standards lineage

This document is one revision in a chain of 13 RFCs, each formally replacing the one before it.

  1. RFC 2065 (1997)
  2. RFC 2535 (1999)
  3. RFC 3008 (2000)
  4. RFC 3090 (2001)
  5. RFC 3445 (2002)
  6. RFC 3655 (2003)
  7. RFC 3658 (2003)
  8. RFC 3755 (2004)
  9. RFC 3757 (2004)
  10. RFC 3845 (2004)
  11. RFC 4033 (2005)
  12. RFC 4034 (2005)
  13. RFC 4035 (2005) ✓

Read the full history of Protocol Modifications for the DNS Security Extensions →

Referenced by

3 later RFCs formally update or obsolete part of this document.

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

Also filed under

About this page

The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.

Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.

Data sources · Editorial policy · Report a correction · What is an RFC?

canonical URL: /rfc/3757-domain-name-system-key-dnskey-resource-record-rr-secure-entry-point-sep-flag