⌕ Поиск по атласу

IETF · RFC · RFC4470

RFC4470 · Minimally Covering NSEC Records and DNSSEC On-line Signing

Minimally Covering NSEC Records and DNSSEC On-line Signing

This document describes how to construct DNSSEC NSEC resource records that cover a smaller range of names than called for by RFC 4034. By generating and signing these records on demand, authoritative name servers can effectively stop the disclosure of zone contents otherwise made possible by walking the chain of NSEC records in a signed zone. [STANDARDS-TRACK]

Официальная английская аннотация

This document describes how to construct DNSSEC NSEC resource records that cover a smaller range of names than called for by RFC 4034. By generating and signing these records on demand, authoritative name servers can effectively stop the disclosure of zone contents otherwise made possible by walking the chain of NSEC records in a signed zone. [STANDARDS-TRACK]

Связи документа

updates: RFC4034, RFC4035

Официальный источник · 2006-04-01

Полные импортированные сведения карточки
{
  "id": "RFC4470",
  "number": 4470,
  "title_en": "Minimally Covering NSEC Records and DNSSEC On-line Signing",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document describes how to construct DNSSEC NSEC resource records that cover a smaller range of names than called for by RFC 4034. By generating and signing these records on demand, authoritative name servers can effectively stop the disclosure of zone contents otherwise made possible by walking the chain of NSEC records in a signed zone. [STANDARDS-TRACK]",
  "authors": [
    "S. Weiler",
    "J. Ihren"
  ],
  "organizations": [],
  "publication_date": "2006-04-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "int",
  "area_ru": "Интернет",
  "working_group": "dnsext",
  "source_draft": "draft-ietf-dnsext-dnssec-online-signing-02",
  "page_count": 8,
  "doi": "10.17487/RFC4470",
  "keywords": [
    "dns security",
    "domain name system"
  ],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC4034",
      "RFC4035"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc4470/",
    "html": "https://www.rfc-editor.org/rfc/rfc4470.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc4470.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc4470/"
  }
}