title

RFC 5011 - Automated Updates of DNS Security (DNSSEC) Trust Anchors

charset

utf-8

X-UA-Compatible

IE=edge

viewport

width=device-width, initial-scale=1

description

Automated Updates of DNS Security (DNSSEC) Trust Anchors (RFC 5011, )

og:title

RFC 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors

og:url

https://datatracker.ietf.org/doc/html/rfc5011.html

og:site_name

IETF Datatracker

og:description

This document describes a means for automated, authenticated, and authorized updating of DNSSEC "trust anchors". The method provides protection against N-1 key compromises of N keys in the trust point key set. Based on the trust established by the presence of a current anchor, other anchors may be added at the same place in the hierarchy, and, ultimately, supplant the existing anchor(s). This mechanism will require changes to resolver management behavior (but not resolver resolution behavior), and the addition of a single flag bit to the DNSKEY record. [STANDARDS-TRACK]

og:type

article

twitter:card

summary_large_image

alternate

/feed/document-changes/rfc5011/

apple-touch-icon

https://static.ietf.org/dt/12.45.0/ietf/images/ietf-logo-nor-180.png

canonical

https://datatracker.ietf.org/doc/html/rfc5011.html

icon

https://static.ietf.org/dt/12.45.0/ietf/images/ietf-logo-nor-32.png

icon

https://static.ietf.org/dt/12.45.0/ietf/images/ietf-logo-nor-16.png