This protocol allows for transaction level authentication using shared secrets and one way hashing. It can be used to authenticate dynamic updates as coming from an approved client, or to authenticate responses as coming from an approved recursive name server. The Domain Name System is primarily used to translate domain names into IPv4 addresses using A RRs.
Several approaches exist to describe networks or address ranges.
This document proposes a new DNS RR type 'APL' for address prefix lists. This document provides one possible solution to this problem. The method described here is intended to be flexible and useful while requiring as few changes to the protocol as possible. Secure communication based on authenticated requests and transactions is used to provide authorization. Encodings to indicate different types of key and pointer formats are specified.