metasystema.org
UpdatedPROPOSED STANDARDIETF stream

RFC 4034: Resource Records for the DNS Security Extensions

Still current, but amended. Parts of this document are changed or extended by RFC 4470, RFC 6014, RFC 6840, RFC 6944, RFC 9077, RFC 9824, RFC 9905. Read both.

In plain English — editorial summary, not part of the RFC

This document is part of a family of documents that describe the DNS Security Extensions (DNSSEC). The DNS Security Extensions are a collection of resource records and protocol modifications that provide source authentication for the DNS. This document defines the public key (DNSKEY), delegation signer (DS), resource record digital signature (RRSIG), and authenticated denial of existence (NSEC) resource records. The purpose and format of each resource record is described in detail, and an example of each resource record is given. This document obsoletes RFC 2535 and incorporates changes from all updates to RFC 2535. [STANDARDS-TRACK]

Document record

Document ID
RFC4034
Published
March 2005
Authors
R. Arends; R. Austein; M. Larson; D. Massey; S. Rose
Status
PROPOSED STANDARD
Stream
IETF
Area
int
Pages
29
Also known as
—
Obsoletes:
RFC 2535, RFC 3008, RFC 3090, RFC 3445, RFC 3655, RFC 3658, RFC 3755, RFC 3757, RFC 3845
Updates:
RFC 1034, RFC 1035, RFC 2136, RFC 2181, RFC 2308, RFC 3225, RFC 3226, RFC 3597
Updated by:
RFC 4470, RFC 6014, RFC 6840, RFC 6944, RFC 9077, RFC 9824, RFC 9905

Topics

Standards lineage

This document is one revision in a chain of 13 RFCs, each formally replacing the one before it.

  1. RFC 2065 (1997)
  2. RFC 2535 (1999)
  3. RFC 3008 (2000)
  4. RFC 3090 (2001)
  5. RFC 3445 (2002)
  6. RFC 3655 (2003)
  7. RFC 3658 (2003)
  8. RFC 3755 (2004)
  9. RFC 3757 (2004)
  10. RFC 3845 (2004)
  11. RFC 4033 (2005)
  12. RFC 4034 (2005)
  13. RFC 4035 (2005) ✓

Read the full history of Protocol Modifications for the DNS Security Extensions →

Referenced by

7 later RFCs formally update or obsolete part of this document.

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

Also filed under

About this page

The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.

Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.

Data sources · Editorial policy · Report a correction · What is an RFC?

canonical URL: /rfc/4034-resource-records-for-the-dns-security-extensions