DNSSEC

DNSSEC (англ. Domain Name System Security Extensions) — IP-даректи алмаштыруу менен байланыштуу чабуулдардын кесепетин минималдаштырууга мүмкүндүк берген DNS протоколунун кеңейтмелеринин топтому. DNS-колдонуучуларга, маалыматтардын ишенимдүүлүгүнө жана бүтүндүгүнө кепилдик берүүгө багытталган.

Тышкы шилтемелер

• DNSSEC браузер аркылуу текшерүү
• DNSSEC — DNSSEC information site: DNSSEC.net
• DNSEXT — DNS Extensions
• CircleID — News and Opinions on all DNSSEC related issues
• DNSSEC-Tools Project
• DNSSEC Deployment Coordination Initiative
• Nox.su: DNSSEC .su доменине кошуунун мисалдары
• DNSSEC колдонууну текшерүү жолдору
• DNS серверлерин чабуулдан коргоо

RFC документтери

• RFC 2535 Domain Name System Security Extensions
• RFC 3225 Indicating Resolver Support of DNSSEC
• RFC 3226 DNSSEC and IPv6 A6 Aware Server/Resolver Message Size Requirements
• RFC 3833 A Threat Analysis of the Domain Name System
• RFC 4033 DNS Security Introduction and Requirements (DNSSEC-bis)
• RFC 4034 Resource Records for the DNS Security Extensions (DNSSEC-bis)
• RFC 4035 Protocol Modifications for the DNS Security Extensions (DNSSEC-bis)
• RFC 4398 Storing Certificates in the Domain Name System (DNS)
• RFC 4431 The DNSSEC Lookaside Validation (DLV) DNS Resource Record
• RFC 4470 Minimally Covering NSEC Records and DNSSEC On-line Signing
• RFC 4509 Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs)
• RFC 4641 DNSSEC Operational Practices
• RFC 4955 DNS Security (DNSSEC) Experiments
• RFC 5011 Automated Updates of DNS Security (DNSSEC) Trust Anchors
• RFC 5155 DNSSEC Hashed Authenticated Denial of Existence
• RFC 5702 Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
• RFC 6605 Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
• RFC 6725 DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates
• RFC 6781 DNSSEC Operational Practices, Version 2
• RFC 6840 Clarifications and Implementation Notes for DNS Security (DNSSEC)
• RFC 7344 Automating DNSSEC Delegation Trust Maintenance
• RFC 7583 DNSSEC Key Rollover Timing Considerations
• RFC 8080 Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC
• RFC 8624 Algorithm Implementation Requirements and Usage Guidance for DNSSEC
• RFC 8749 Moving DNSSEC Lookaside Validation (DLV) to Historic Status