{
  "draft": "draft-ietf-dnsop-edns-key-tag-05",
  "doc_id": "RFC8145",
  "title": "Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC)",
  "authors": [
    "D. Wessels",
    "W. Kumari",
    "P. Hoffman"
  ],
  "format": [
    "TEXT",
    "HTML"
  ],
  "page_count": "13",
  "pub_status": "PROPOSED STANDARD",
  "status": "PROPOSED STANDARD",
  "source": "Domain Name System Operations",
  "abstract": "The DNS Security Extensions (DNSSEC) were developed to provide origin authentication and integrity protection for DNS data by using digital signatures.  These digital signatures can be verified by building a chain of trust starting from a trust anchor and proceeding down to a particular node in the DNS.  This document specifies two different ways for validating resolvers to signal to a server which keys are referenced in their chain of trust.  The data from such signaling allow zone administrators to monitor the progress of rollovers in a DNSSEC-signed zone.",
  "pub_date": "April 2017",
  "keywords": [
    "DNS",
    "DNSSEC",
    "Trust Anchor"
  ],
  "obsoletes": [],
  "obsoleted_by": [],
  "updates": [],
  "updated_by": [
    "RFC8553"
  ],
  "see_also": [],
  "doi": "10.17487/RFC8145",
  "errata_url": null
}