RFC 7646

Definition and Use of DNSSEC Negative Trust Anchors, September 2015

Canonical URL:
https://www.rfc-editor.org/rfc/rfc7646.txt
File formats:
Plain TextPDF
Status:
INFORMATIONAL
Authors:
P. Ebersman
W. Kumari
C. Griffiths
J. Livingood
R. Weber
Stream:
IETF
Source:
dnsop (ops)

Cite this RFC: TXT  |  XML

DOI:  10.17487/RFC7646

Discuss this RFC: Send questions or comments to dnsop@ietf.org

Other actions: Submit Errata  |  Find IPR Disclosures from the IETF


Abstract

DNS Security Extensions (DNSSEC) is now entering widespread deployment. However, domain signing tools and processes are not yet as mature and reliable as those for non-DNSSEC-related domain administration tools and processes. This document defines Negative Trust Anchors (NTAs), which can be used to mitigate DNSSEC validation failures by disabling DNSSEC validation at specified domains.


For the definition of Status, see RFC 2026.

For the definition of Stream, see RFC 4844.


Download PDF Reader



Search RFCs
Advanced Search
×