metasystema.org
UpdatedPROPOSED STANDARDIETF stream

RFC 4398: Storing Certificates in the Domain Name System (DNS)

Still current, but amended. Parts of this document are changed or extended by RFC 6944. Read both.

In plain English — editorial summary, not part of the RFC

Cryptographic public keys are frequently published, and their authenticity is demonstrated by certificates. A CERT resource record (RR) is defined so that such certificates and related certificate revocation lists can be stored in the Domain Name System (DNS). [STANDARDS-TRACK]

Document record

Document ID
RFC4398
Published
March 2006
Authors
S. Josefsson
Status
PROPOSED STANDARD
Stream
IETF
Area
int
Pages
17
Also known as
—
Obsoletes:
RFC 2538
Updated by:
RFC 6944

Topics

Referenced by

One later RFC formally updates or obsoletes part of this document.

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

Also filed under

About this page

The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.

Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.

Data sources · Editorial policy · Report a correction · What is an RFC?

canonical URL: /rfc/4398-storing-certificates-in-the-domain-name-system-dns