RFC Compliance
NSD strives to be a reference implementation for emerging standards in the Internet Engineering Task Force (IETF). The aim is to implement well-established Internet Drafts as a compile option and drafts in the final stage of open community review as an optional feature, that is disabled by default. Accepted RFCs are implemented in NSD according to the described standard.
The following table provides an extensive overview of all the RFC standards and Internet drafts that have been implemented in NSD.
Domain Names – Concepts and Facilities |
|
Domain Names – Implementation and Specification |
|
DNS Encoding of Network Names and Other Types |
|
MIME (Multipurpose Internet Mail Extensions) Part One: Mechanisms for Specifying and Describing the Format of Internet Message Bodies |
|
DNS NSAP Resource Records |
|
DNS Encoding of Geographical Location |
|
A Means for Expressing Location Information in the Domain Name System |
|
Serial Number Arithmetic |
|
Incremental Zone Transfer in DNS |
|
A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY) |
|
Using the Internet DNS to Distribute MIXER Conformant Global Address Mapping (MCGAM) |
|
Resolution of Uniform Resource Identifiers using the Domain Name System |
|
Clarifications to the DNS Specification |
|
Key Exchange Delegation Record for the DNS |
|
Lightweight Directory Access Protocol (v3): UTF-8 String Representation of Distinguished Names |
|
Negative Caching of DNS Queries (DNS NCACHE) |
|
Domain Name System Security Extensions |
|
DSA KEYs and SIGs in the Domain Name System (DNS) |
|
RSA/MD5 KEYs and SIGs in the Domain Name System (DNS) |
|
Storing Certificates in the Domain Name System (DNS) |
|
Storage of Diffie-Hellman Keys in the Domain Name System (DNS) |
|
Reserved Top Level DNS Names |
|
Extension Mechanisms for DNS (EDNS0) |
|
Non-Terminal DNS Name Redirection |
|
Binary Labels in the Domain Name System |
|
A DNS RR for specifying the location of services (DNS SRV) |
|
Secret Key Transaction Authentication for DNS (TSIG) |
|
DNS Extensions to Support IPv6 Address Aggregation and Renumbering |
|
The Naming Authority Pointer (NAPTR) DNS Resource Record |
|
Secret Key Establishment for DNS (TKEY RR) |
|
RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS) |
|
A DNS RR Type for Lists of Address Prefixes (APL RR) |
|
Indicating Resolver Support of DNSSEC |
|
Handling of Unknown DNS Resource Record (RR) Types |
|
Legacy Resolver Compatibility for Delegation Signer (DS) |
|
A Method for Storing IPsec Keying Material in DNS |
|
DNS Security Introduction and Requirements |
|
Resource Records for the DNS Security Extensions |
|
Protocol Modifications for the DNS Security Extensions |
|
Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints |
|
Domain Name System (DNS) Case Insensitivity Clarification |
|
Storing Certificates in the Domain Name System (DNS) |
|
The DNSSEC Lookaside Validation (DLV) DNS Resource Record |
|
Use of SHA-256 in DNSSEC Delegation Signer (DS) Resource Records (RRs) |
|
The Role of Wildcards in the Domain Name System |
|
Conferencing Scenarios |
|
HMAC SHA TSIG Algorithm Identifiers |
|
A DNS Resource Record (RR) for Encoding Dynamic Host Configuration Protocol (DHCP) Information (DHCID RR) |
|
Requirements for a Mechanism Identifying a Name Server Instance |
|
DNS Name Server Identifier (NSID) Option |
|
Additional Diffie-Hellman Groups for Use with IETF Standards |
|
DNS Security (DNSSEC) Hashed Authenticated Denial of Existence |
|
Host Identity Protocol (HIP) Domain Name System (DNS) Extension |
|
Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC |
|
Use of GOST Signature Algorithms in DNSKEY and RRSIG Resource Records for DNSSEC |
|
DNS Zone Transfer Protocol (AXFR) |
|
xNAME RCODE and Status Bits Clarification |
|
Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC |
|
DNAME Redirection in the DNS |
|
The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA |
|
DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates |
|
DNS Resource Records for the Identifier-Locator Network Protocol (ILNP) |
|
Special-Use Domain Names |
|
Clarifications and Implementation Notes for DNS Security (DNSSEC) |
|
DNS Certification Authority Authorization (CAA) Resource Record |
|
Extension Mechanisms for DNS (EDNS(0)) |
|
Domain Name System (DNS) IANA Considerations |
|
Resource Records for EUI-48 and EUI-64 Addresses in the DNS |
|
Automating DNSSEC Delegation Trust Maintenance |
|
Child-to-Parent Synchronization in DNS |
|
The Uniform Resource Identifier (URI) DNS Resource Record |
|
DNS Transport over TCP - Implementation Requirements |
|
Domain Name System (DNS) Cookies |
|
DNS-Based Authentication of Named Entities (DANE) Bindings for OpenPGP |
|
Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC |
|
Using Secure DNS to Associate Certificates with Domain Names for S/MIME |
|
Providing Minimal-Sized Responses to DNS Queries That Have QTYPE=ANY |
|
Extended DNS Errors |
|
Secret Key Transaction Authentication for DNS (TSIG) |
|
Interoperable Domain Name System (DNS) Server Cookies |
|
DNS Zone Transfer over TLS |
|
DNS Transport over TCP - Operational Requirements |
|
DNS Catalog Zones |