These digital signatures are included in secured zones as resource records. Security can still be provided even through non-security aware DNS servers in many cases. This storage of keys can support general public key distribution service as well as DNS security. The stored keys enable security aware resolvers to learn the authenticating key of zones in addition to those for which they are initially configured. Keys associated with DNS names can be retrieved to support other protocols.
Provision is made for a variety of key types and algorithms.
In addition, the security extensions provide for the optional authentication of DNS protocol transactions. Edie Gunter Sandy Murphy Masataka Ohta Michael A. Patton Jeffrey I. Schiller Table of Contents 1. Overview of Contents 2. Other Than The Zone 2.4 DNS Transaction and Request Authentication 3. Blocking NXT Pseudo-Zone Transfers 5.6 Special Considerations at Delegation Points 6.