Search RFCs
RFC 7646
Definition and Use of DNSSEC Negative Trust Anchors,September 2015
- File formats:
- Status:
- INFORMATIONAL
- Authors:
- P. Ebersman
W. Kumari
C. Griffiths
J. Livingood
R. Weber - Stream:
- IETF
- Source:
- dnsop (ops)
Cite this RFC:TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC7646
Discuss this RFC: Send questions or comments to the mailing listdnsop@ietf.org
Other actions:Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 7646
Abstract
DNS Security Extensions (DNSSEC) is now entering widespreaddeployment. However, domain signing tools and processes are not yetas mature and reliable as those for non-DNSSEC-related domainadministration tools and processes. This document defines NegativeTrust Anchors (NTAs), which can be used to mitigate DNSSEC validationfailures by disabling DNSSEC validation at specified domains.
For the definition ofStatus,seeRFC 2026.
For the definition ofStream, seeRFC 8729.