DNSSEC Trust Anchor Publication for the Root Zone
RFC 9718, “DNSSEC Trust Anchor Publication for the Root Zone”, is an Informational document published in January 2025 by J. Abley, J. Schlyter, G. Bailey, P. Hoffman. It obsoletes RFC 7958. The canonical text is published by the RFC Editor.
Abstract
The root zone of the global Domain Name System (DNS) is cryptographically signed using DNS Security Extensions (DNSSEC).
In order to obtain secure answers from the root zone of the DNS using DNSSEC, a client must configure a suitable trust anchor. This document describes the format and publication mechanisms IANA uses to distribute the DNSSEC trust anchors.
This document obsoletes RFC 7958.
What “Informational” means
Published for the general information of the community. It does not define an IETF standard and carries no standards-track status.
The canonical text of RFC 9718 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9717 A Routing Architecture for Satellite Networks
- RFC 9719 YANG Data Model for Routing in Fat Trees
- RFC 9716 Mechanisms for MPLS Ping and Traceroute Procedures in Inter-Domain Segment Routing Networks
- RFC 9720 RFC Formats and Versions
- RFC 9715 IP Fragmentation Avoidance in DNS over UDP
- RFC 9721 Extended Mobility Procedures for Ethernet VPN Integrated Routing and Bridging
- RFC 9714 Encapsulation for MPLS Performance Measurement with the Alternate- Marking Method
- RFC 9722 Fast Recovery for EVPN Designated Forwarder Election