... | ... | @@ -26,6 +26,7 @@ |
|
|
* The EDNS(0) Padding Option ([RFC 7830](https://tools.ietf.org/html/rfc7830))
|
|
|
* Specification for DNS over Transport Layer Security (TLS) ([RFC 7858](https://tools.ietf.org/html/rfc7858))
|
|
|
* NXDOMAIN: There Really Is Nothing Underneath ([RFC 8020](https://tools.ietf.org/html/rfc8020))
|
|
|
* Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC) ([RFC 8145](https://tools.ietf.org/html/rfc8145))
|
|
|
|
|
|
### Best current practice
|
|
|
* Observed DNS Resolution Misbehavior ([RFC 4697](https://tools.ietf.org/html/rfc4697))
|
... | ... | @@ -91,7 +92,6 @@ |
|
|
* Aggressive use of DNSSEC-validated Cache ([draft ietf-dnsop-nsec-aggressiveuse](http://tools.ietf.org/html/draft-ietf-dnsop-nsec-aggressiveuse))
|
|
|
* Algorithm Implementation Requirements and Usage Guidance for DNSSEC ([draft wouters-sury-dnsop-algorithm-update](http://tools.ietf.org/html/draft-wouters-sury-dnsop-algorithm-update))
|
|
|
* Security Considerations for RFC5011 Publishers ([draft hardaker-rfc5011-security-considerations](https://tools.ietf.org/html/draft-hardaker-rfc5011-security-considerations))
|
|
|
* Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC) ([draft ietf-dnsop-edns-key-tag](http://tools.ietf.org/html/draft-ietf-dnsop-edns-key-tag))
|
|
|
|
|
|
#### Not adoped by dnsop WG (yet?)
|
|
|
* DNSSEC Validators Requirements ([draft mglt-dnsop-dnssec-validator-requirements](https://tools.ietf.org/html/draft-mglt-dnsop-dnssec-validator-requirements))
|
... | ... | |