metasystema.org
CurrentPROPOSED STANDARDIETF stream

RFC 6975: Signaling Cryptographic Algorithm Understanding in DNS Security Extensions (DNSSEC)

In plain English — editorial summary, not part of the RFC

The DNS Security Extensions (DNSSEC) were developed to provide origin authentication and integrity protection for DNS data by using digital signatures. These digital signatures can be generated using different algorithms. This document specifies a way for validating end-system resolvers to signal to a server which digital signature and hash algorithms they support. The extensions allow the signaling of new algorithm uptake in client code to allow zone administrators to know when it is possible to complete an algorithm rollover in a DNSSEC-signed zone.

Document record

Document ID
RFC6975
Published
July 2013
Authors
S. Crocker; S. Rose
Status
PROPOSED STANDARD
Stream
IETF
Area
int
Pages
9
Also known as
—

Topics

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

Also filed under

About this page

The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.

Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.

Data sources · Editorial policy · Report a correction · What is an RFC?

canonical URL: /rfc/6975-signaling-cryptographic-algorithm-understanding-in-dns-security-extensions-dnsse