RFC 4509 · PROPOSED STANDARD · 2006
MON · 27 JUL 2026
Use of SHA-256 in DNSSEC Delegation Signer Resource Records
Overview
RFC 4509, “Use of SHA-256 in DNSSEC Delegation Signer Resource Records”, is a Proposed Standard document published in May 2006 by W. Hardaker. The canonical text is published by the RFC Editor.
Abstract
This document specifies how to use the SHA-256 digest type in DNS Delegation Signer (DS) Resource Records (RRs). DS records, when stored in a parent zone, point to DNSKEYs in a child zone. [STANDARDS-TRACK]
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
Read this RFC
The canonical text of RFC 4509 is hosted at rfc-editor.org. Available in TXT,HTML.
Other RFCs from 2006
- RFC 4508 Conveying Feature Tags with the Session Initiation Protocol REFER Method
- RFC 4510 Lightweight Directory Access Protocol : Technical Specification Road Map
- RFC 4507 Transport Layer Security Session Resumption without Server- Side State
- RFC 4511 Lightweight Directory Access Protocol : The Protocol
- RFC 4506 XDR: External Data Representation Standard
- RFC 4512 Lightweight Directory Access Protocol : Directory Information Models
- RFC 4505 Anonymous Simple Authentication and Security Layer Mechanism
- RFC 4513 Lightweight Directory Access Protocol : Authentication Methods and Security Mechanisms