RFC 4956: DNS Security (DNSSEC) Opt-In
In plain English — editorial summary, not part of the RFC
In the DNS security (DNSSEC) extensions, delegations to unsigned subzones are cryptographically secured. Maintaining this cryptography is not always practical or necessary. This document describes an experimental "Opt-In" model that allows administrators to omit this cryptography and manage the cost of adopting DNSSEC with large zones. This memo defines an Experimental Protocol for the Internet community.
Document record
- Document ID
- RFC4956
- Published
- July 2007
- Authors
- R. Arends; M. Kosters; D. Blacka
- Status
- EXPERIMENTAL
- Stream
- IETF
- Area
- int
- Pages
- 17
- Also known as
- —
Topics
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 4955DNS Security (DNSSEC) ExperimentsCurrent
July 2007
- RFC 4471Derivation of DNS Name Predecessor and SuccessorCurrent
September 2006
- RFC 5006IPv6 Router Advertisement Option for DNS ConfigurationObsoleted
September 2007
- RFC 4957Link-Layer Event Notifications for Detecting Network AttachmentsCurrent
August 2007
- RFC 4968Analysis of IPv6 Link Models for 802.16 Based NetworksCurrent
August 2007
- RFC 4944Transmission of IPv6 Packets over IEEE 802.15.4 NetworksUpdated
September 2007
- RFC 4941Privacy Extensions for Stateless Address Autoconfiguration in IPv6Obsoleted
September 2007
- RFC 4977Problem Statement: Dual Stack MobilityCurrent
August 2007
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?