RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
In plain English — editorial summary, not part of the RFC
The Domain Name System Security (DNSSEC) Extensions introduced the NSEC resource record (RR) for authenticated denial of existence. This document introduces an alternative resource record, NSEC3, which similarly provides authenticated denial of existence. However, it also provides measures against zone enumeration and permits gradual expansion of delegation-centric zones. [STANDARDS-TRACK]
Document record
- Document ID
- RFC5155
- Published
- March 2008
- Authors
- B. Laurie; G. Sisson; R. Arends; D. Blacka
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- int
- Pages
- 52
- Also known as
- —
Topics
Referenced by
6 later RFCs formally update or obsolete part of this document.
- RFC 6840Clarifications and Implementation Notes for DNS Security (DNSSEC)Updated
February 2013
- RFC 6944Applicability Statement: DNS Security (DNSSEC) DNSKEY Algorithm Implementation StatusObsoleted
April 2013
- RFC 9077NSEC and NSEC3: TTLs and Aggressive UseCurrent
July 2021
- RFC 9157Revised IANA Considerations for DNSSECUpdated
December 2021
- RFC 9276Guidance for NSEC3 Parameter SettingsCurrent
August 2022
- RFC 9905Deprecating the Use of SHA-1 in DNSSEC Signature AlgorithmsCurrent
November 2025
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 3845DNS Security (DNSSEC) NextSECure (NSEC) RDATA FormatObsoleted
August 2004
- RFC 3755Legacy Resolver Compatibility for Delegation Signer (DS)Obsoleted
May 2004
- RFC 3597Handling of Unknown DNS Resource Record (RR) TypesUpdated
September 2003
- RFC 3123A DNS RR Type for Lists of Address Prefixes (APL RR)Current
June 2001
- RFC 2930Secret Key Establishment for DNS (TKEY RR)Updated
September 2000
- RFC 2782A DNS RR for specifying the location of services (DNS SRV)Updated
February 2000
- RFC 3832Remote Service Discovery in the Service Location Protocol (SLP) via DNS SRVUpdated
July 2004
- RFC 3404Dynamic Delegation Discovery System (DDDS) Part Four: The Uniform Resource Identifiers (URI)Current
October 2002
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?