⌕ Поиск по атласу

IETF · RFC · RFC9824

RFC9824 · Compact Denial of Existence in DNSSEC

Compact Denial of Existence in DNSSEC

This document describes a technique to generate a signed DNS response on demand for a nonexistent name by claiming that the name exists but doesn't have any data for the queried record type. Such responses require only one minimally covering NSEC or NSEC3 record, allow online signing servers to minimize signing operations and response sizes, and prevent zone content disclosure. This document updates RFCs 4034 and 4035.

Официальная английская аннотация

This document describes a technique to generate a signed DNS response on demand for a nonexistent name by claiming that the name exists but doesn't have any data for the queried record type. Such responses require only one minimally covering NSEC or NSEC3 record, allow online signing servers to minimize signing operations and response sizes, and prevent zone content disclosure. This document updates RFCs 4034 and 4035.

Связи документа

updates: RFC4034, RFC4035

Официальный источник · 2025-09-01

Полные импортированные сведения карточки
{
  "id": "RFC9824",
  "number": 9824,
  "title_en": "Compact Denial of Existence in DNSSEC",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document describes a technique to generate a signed DNS response on demand for a nonexistent name by claiming that the name exists but doesn't have any data for the queried record type. Such responses require only one minimally covering NSEC or NSEC3 record, allow online signing servers to minimize signing operations and response sizes, and prevent zone content disclosure. This document updates RFCs 4034 and 4035.",
  "authors": [
    "S. Huque",
    "C. Elmerot",
    "O. Gudmundsson"
  ],
  "organizations": [],
  "publication_date": "2025-09-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "ops",
  "area_ru": "Эксплуатация и управление",
  "working_group": "dnsop",
  "source_draft": "draft-ietf-dnsop-compact-denial-of-existence-07",
  "page_count": 14,
  "doi": "10.17487/RFC9824",
  "keywords": [
    "DNS",
    "DNSSEC",
    "Denial of Existence",
    "Compact Denial of Existence",
    "Compact Answers",
    "Black Lies",
    "NXDOMAIN",
    "NODATA",
    "Empty Non-Terminal"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC4034",
      "RFC4035"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9824/",
    "html": "https://www.rfc-editor.org/rfc/rfc9824.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9824.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9824/"
  }
}