I-D Action: draft-sury-dnsop-rrsig-refused-00.txt

Internet-Draft draft-sury-dnsop-rrsig-refused-00.txt is now available.

   Title:   Refusing DNS Queries That Have QTYPE=RRSIG
   Authors: Ondřej Surý
            Jan Včelák
            Petr Špaček
   Name:    draft-sury-dnsop-rrsig-refused-00.txt
   Pages:   7
   Dates:   2026-08-14

Abstract:

   The Domain Name System (DNS) allows a query with QTYPE=RRSIG.  Such a
   query has no useful answer.  RRSIG resource records are meaningful
   only together with the resource records they cover, so a response can
   carry no more than an arbitrary subset of the signatures present at
   the query name.  This document specifies that DNS responders refuse
   queries with QTYPE=RRSIG, and that DNS requestors do not send them.
   It supplies the guidance that [RFC8482] left unspecified.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-sury-dnsop-rrsig-refused/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-sury-dnsop-rrsig-refused-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]