⌕ Поиск по атласу

IETF · RFC · RFC3655

RFC3655 · Redefinition of DNS Authenticated Data (AD) bit

Redefinition of DNS Authenticated Data (AD) bit

This document alters the specification defined in RFC 2535. Based on implementation experience, the Authenticated Data (AD) bit in the DNS header is not useful. This document redefines the AD bit such that it is only set if all answers or records proving that no answers exist in the response has been cryptographically verified or otherwise meets the server's local security policy.

Официальная английская аннотация

This document alters the specification defined in RFC 2535. Based on implementation experience, the Authenticated Data (AD) bit in the DNS header is not useful. This document redefines the AD bit such that it is only set if all answers or records proving that no answers exist in the response has been cryptographically verified or otherwise meets the server's local security policy.

Связи документа

obsoleted_by: RFC4033, RFC4034, RFC4035

updates: RFC2535

Официальный источник · 2003-11-01

Полные импортированные сведения карточки
{
  "id": "RFC3655",
  "number": 3655,
  "title_en": "Redefinition of DNS Authenticated Data (AD) bit",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document alters the specification defined in RFC 2535. Based on implementation experience, the Authenticated Data (AD) bit in the DNS header is not useful. This document redefines the AD bit such that it is only set if all answers or records proving that no answers exist in the response has been cryptographically verified or otherwise meets the server's local security policy.",
  "authors": [
    "B. Wellington",
    "O. Gudmundsson"
  ],
  "organizations": [],
  "publication_date": "2003-11-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "superseded",
  "lifecycle_ru": "Заменён",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "int",
  "area_ru": "Интернет",
  "working_group": "dnsext",
  "source_draft": "draft-ietf-dnsext-ad-is-secure-06",
  "page_count": 8,
  "doi": "10.17487/RFC3655",
  "keywords": [
    "DNS-SECEXT",
    "dns",
    "authentication"
  ],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [
      "RFC4033",
      "RFC4034",
      "RFC4035"
    ],
    "updates": [
      "RFC2535"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc3655/",
    "html": "https://www.rfc-editor.org/rfc/rfc3655.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc3655.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc3655/"
  }
}