RFC 2536 · PROPOSED STANDARD · 1999
MON · 27 JUL 2026
DSA KEYs and SIGs in the Domain Name System
Overview
RFC 2536, “DSA KEYs and SIGs in the Domain Name System”, is a Proposed Standard document published in March 1999 by D. Eastlake 3rd. It has since been updated by RFC 6944. The canonical text is published by the RFC Editor.
Abstract
A standard method for storing US Government Digital Signature Algorithm keys and signatures in the Domain Name System is described which utilizes DNS KEY and SIG resource records. [STANDARDS-TRACK]
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
Read this RFC
The canonical text of RFC 2536 is hosted at rfc-editor.org. Available in TXT,HTML.
Relationships to other RFCs
Other RFCs from 1999
- RFC 2535 Domain Name System Security Extensions
- RFC 2537 RSA/MD5 KEYs and SIGs in the Domain Name System
- RFC 2534 Media Features for Display, Print, and Fax
- RFC 2538 Storing Certificates in the Domain Name System
- RFC 2533 A Syntax for Describing Media Feature Sets
- RFC 2539 Storage of Diffie-Hellman Keys in the Domain Name System
- RFC 2532 Extended Facsimile Using Internet Mail
- RFC 2540 Detached Domain Name System Information