DNSSEC (англ. Domain Name System Security Extensions) — IP-даректи алмаштыруу менен байланыштуу чабуулдардын кесепетин минималдаштырууга мүмкүндүк берген DNS протоколунун кеңейтмелеринин топтому. DNS-колдонуучуларга, маалыматтардын ишенимдүүлүгүнө жана бүтүндүгүнө кепилдик берүүгө багытталган.

Тышкы шилтемелер

түзөтүү

RFC документтери

түзөтүү
  • RFC 2535 Domain Name System Security Extensions
  • RFC 3225 Indicating Resolver Support of DNSSEC
  • RFC 3226 DNSSEC and IPv6 A6 Aware Server/Resolver Message Size Requirements
  • RFC 3833 A Threat Analysis of the Domain Name System
  • RFC 4033 DNS Security Introduction and Requirements (DNSSEC-bis)
  • RFC 4034 Resource Records for the DNS Security Extensions (DNSSEC-bis)
  • RFC 4035 Protocol Modifications for the DNS Security Extensions (DNSSEC-bis)
  • RFC 4398 Storing Certificates in the Domain Name System (DNS)
  • RFC 4431 The DNSSEC Lookaside Validation (DLV) DNS Resource Record
  • RFC 4470 Minimally Covering NSEC Records and DNSSEC On-line Signing
  • RFC 4509 Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)
  • RFC 4641 DNSSEC Operational Practices
  • RFC 4955 DNS Security (DNSSEC) Experiments
  • RFC 5011 Automated Updates of DNS Security (DNSSEC) Trust Anchors
  • RFC 5155 DNSSEC Hashed Authenticated Denial of Existence
  • RFC 5702 Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
  • RFC 6605 Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
  • RFC 6725 DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates
  • RFC 6781 DNSSEC Operational Practices, Version 2
  • RFC 6840 Clarifications and Implementation Notes for DNS Security (DNSSEC)
  • RFC 7344 Automating DNSSEC Delegation Trust Maintenance
  • RFC 7583 DNSSEC Key Rollover Timing Considerations
  • RFC 8080 Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC
  • RFC 8624 Algorithm Implementation Requirements and Usage Guidance for DNSSEC
  • RFC 8749 Moving DNSSEC Lookaside Validation (DLV) to Historic Status