RFC - 3645

Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG)

Original:	ftp://ftp.isi.edu/in-notes/rfc3645.txt
Authors:	S. Kwan [Microsoft Corp.], P. Garg [Microsoft Corp.], J. Gilroy [Microsoft Corp.], L. Esibov [Microsoft Corp.], J. Westhead [Microsoft Corp.], R. Hall [Lucent Technologies]
Date:	October 2003
Category:	Proposed Standard

---

Updates:
RFC-2845prop	Secret Key Transaction Authentication for DNS (TSIG) (Updated by RFC-3645prop)

Referred by:	1 RFC
Refers to:	10 RFC

---

Status

This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited.

Copyright Notice

Copyright (C) The Internet Society (2003). All Rights Reserved.

Abstract

The Secret Key Transaction Authentication for DNS (TSIG) protocol provides transaction level authentication for DNS. TSIG is extensible through the definition of new algorithms. This document specifies an algorithm based on the Generic Security Service Application Program Interface (GSS-API) (RFC2743^prop). This document updates RFC 2845^prop.

---