Definition and Use of DNSSEC Negative Trust Anchors, September 2015
- File formats:
- P. Ebersman
- dnsop (ops)
Discuss this RFC: Send questions or comments to email@example.com
DNS Security Extensions (DNSSEC) is now entering widespread deployment. However, domain signing tools and processes are not yet as mature and reliable as those for non-DNSSEC-related domain administration tools and processes. This document defines Negative Trust Anchors (NTAs), which can be used to mitigate DNSSEC validation failures by disabling DNSSEC validation at specified domains.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.