Statements (86)
| Predicate | Object |
|---|---|
| gptkbp:instance_of |
gptkb:standard
|
| gptkbp:bfsLayer |
3
|
| gptkbp:bfsParent |
gptkb:Monarch
|
| gptkbp:can_be_used_with |
gptkb:DNS_over_TLS
gptkb:DNS_over_HTTPS |
| gptkbp:dependency |
gptkb:XMPP_Extension_Protocol
|
| gptkbp:developed_by |
gptkb:Internet_Engineering_Task_Force
|
| gptkbp:enhances |
DNS security
security of the Domain Name System |
| gptkbp:first_published |
gptkb:RFC_4033
|
| https://www.w3.org/2000/01/rdf-schema#label |
DNSSEC
|
| gptkbp:includes |
DS records
NSEC records RRSIG records key signing keys zone signing keys |
| gptkbp:introduced |
gptkb:2005
|
| gptkbp:is |
a replacement for DNS
|
| gptkbp:is_adopted_by |
gptkb:Educational_Institution
government agencies non-profit organizations large enterprises telecommunications companies |
| gptkbp:is_challenged_by |
performance issues
key management issues lack of awareness complexity of implementation legacy systems compatibility cost of deployment performance concerns key management difficulties |
| gptkbp:is_compatible_with |
some legacy systems
|
| gptkbp:is_evaluated_by |
risk management frameworks
security assessments security audits penetration testing |
| gptkbp:is_implemented_in |
gptkb:Unbound
gptkb:Knot_DNS gptkb:Power_DNS gptkb:BIND domain name registrars |
| gptkbp:is_part_of |
gptkb:Monarch
cybersecurity measures DNS protocol suite internet governance network security protocols Internet security framework |
| gptkbp:is_promoted_by |
gptkb:political_movement
gptkb:DNSSEC_Alliance gptkb:Cybersecurity_and_Infrastructure_Security_Agency DNSSEC Deployment Initiative |
| gptkbp:is_protected_by |
DNS spoofing
|
| gptkbp:is_related_to |
gptkb:RFC_4035
gptkb:RFC_4034 gptkb:RFC_5155 gptkb:TLS/_SSL gptkb:RFC_8624 gptkb:PKI PKI (Public Key Infrastructure) NSE C3 records RFC 6781 RFC 8145 CDNSKEY records CDS records DNSKEY record DNSSEC Lookaside Validation (DLV) DNSSEC Trust Anchor key signing key (KSK) zone signing key (ZSK) |
| gptkbp:is_supported_by |
gptkb:ICANN
gptkb:IANA major web browsers most modern DNS servers various DNS software vendors |
| gptkbp:is_tested_for |
gptkb:DNSSEC_Debugger
gptkb:Verisign_Labs |
| gptkbp:is_used_in |
secure DNS transactions
secure email systems |
| gptkbp:provides |
authentication of DNS responses
|
| gptkbp:purpose |
to protect the integrity of DNS data
|
| gptkbp:related_to |
gptkb:DNS
|
| gptkbp:requires |
public key infrastructure
top-level domains DNS resolver support |
| gptkbp:supports |
zone signing
|
| gptkbp:uses |
digital signatures
|