Search RFCs
RFC 6781
DNSSEC Operational Practices, Version 2,December 2012
- File formats:
- Status:
- INFORMATIONAL
- Obsoletes:
- RFC 4641
- Authors:
- O. Kolkman
W. Mekking
R. Gieben - Stream:
- IETF
- Source:
- dnsop (ops)
Cite this RFC:TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC6781
Discuss this RFC: Send questions or comments to the mailing listdnsop@ietf.org
Other actions:View Errata | Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 6781
Abstract
This document describes a set of practices for operating the DNS withsecurity extensions (DNSSEC). The target audience is zoneadministrators deploying DNSSEC.
The document discusses operational aspects of using keys andsignatures in the DNS. It discusses issues of key generation, keystorage, signature generation, key rollover, and related policies.
This document obsoletes RFC 4641, as it covers more operationalground and gives more up-to-date requirements with respect to keysizes and the DNSSEC operations.
For the definition ofStatus,seeRFC 2026.
For the definition ofStream, seeRFC 8729.