⌕ Поиск по атласу

IETF · RFC · RFC5011

RFC5011 · Automated Updates of DNS Security (DNSSEC) Trust Anchors

Automated Updates of DNS Security (DNSSEC) Trust Anchors

This document describes a means for automated, authenticated, and authorized updating of DNSSEC "trust anchors". The method provides protection against N-1 key compromises of N keys in the trust point key set. Based on the trust established by the presence of a current anchor, other anchors may be added at the same place in the hierarchy, and, ultimately, supplant the existing anchor(s). This mechanism will require changes to resolver management behavior (but not resolver resolution behavior), and the addition of a single flag bit to the DNSKEY record. [STANDARDS-TRACK]

Официальная английская аннотация

This document describes a means for automated, authenticated, and authorized updating of DNSSEC "trust anchors". The method provides protection against N-1 key compromises of N keys in the trust point key set. Based on the trust established by the presence of a current anchor, other anchors may be added at the same place in the hierarchy, and, ultimately, supplant the existing anchor(s). This mechanism will require changes to resolver management behavior (but not resolver resolution behavior), and the addition of a single flag bit to the DNSKEY record. [STANDARDS-TRACK]

Связи документа

is_also: STD74

Официальный источник · 2007-09-01

Полные импортированные сведения карточки
{
  "id": "RFC5011",
  "number": 5011,
  "title_en": "Automated Updates of DNS Security (DNSSEC) Trust Anchors",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document describes a means for automated, authenticated, and authorized updating of DNSSEC \"trust anchors\". The method provides protection against N-1 key compromises of N keys in the trust point key set. Based on the trust established by the presence of a current anchor, other anchors may be added at the same place in the hierarchy, and, ultimately, supplant the existing anchor(s). This mechanism will require changes to resolver management behavior (but not resolver resolution behavior), and the addition of a single flag bit to the DNSKEY record. [STANDARDS-TRACK]",
  "authors": [
    "M. StJohns"
  ],
  "organizations": [],
  "publication_date": "2007-09-01",
  "current_status": "INTERNET STANDARD",
  "current_status_ru": "Стандарт Интернета",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "int",
  "area_ru": "Интернет",
  "working_group": "dnsext",
  "source_draft": "draft-ietf-dnsext-trustupdate-timers-06",
  "page_count": 14,
  "doi": "10.17487/RFC5011",
  "keywords": [
    "n-1 key",
    "n keys"
  ],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [
      "STD74"
    ],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc5011/",
    "html": "https://www.rfc-editor.org/rfc/rfc5011.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc5011.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc5011/"
  }
}