DNSSEC definition

DNSSEC refers to DNS Security Extensions. This is an extension of the DNS system and is intended to improve security. DNSSEC is an additional service.

Split View

AI-Powered Contracts

Draft, Review & Redline at the Speed of AI

Get StartedSchedule a Demo

DNSSEC means the file is required if the Registry supports DNSSEC. “disclosure” means the file type is required if the Registry supports contact disclosure controls. “no” means the file type shall not be present in the Deposit. DOMAIN yes yes DOMIDN IDN IDN IDNTABLES IDN IDN CONTACT thick thick CONADR thick thick NAMESERVER yes yes NISP yes yes REGISTRAR yes yes DOMSTATUS yes yes CONSTATUS thick thick NSSTATUS yes yes DOMCONTACT thick thick DOMNS yes yes DOMDEL no yes CONTDEL no thick NSDEL no yes DOMDS DNSSEC DNSSEC DSDEL no DNSSEC CONDISCL disclosure disclosure DCP yes yes EPPVERSIONS yes yes LANGS yes yes EPPOBJECTS yes yes EPPEXTENSIONS yes yes XSDOBJDOMAIN yes yes XSDOBJCONTACT yes yes XSDOBJHOST yes yes XSDEXTDRGP yes yes XSDEXTDNSSEC yes yes

DNSSEC means Domain Name System Security Extensions;

Examples of DNSSEC in a sentence

• There is a valid DNSSEC chain of trust from the root trust anchor to a particular domain name, e.g., a TLD, a domain name registered under a TLD, etc.

• Registry shall also publish in its website the DNSSEC Practice Statements (DPS) describing critical security controls and procedures for key material storage, access and usage for its own keys and secure acceptance of registrants’ public-­‐key material.

• DNS Service (all servers) 4-hour total downtime / week DNSSEC proper resolution 4-hour total downtime / week EPP 24-hour total downtime / week RDDS (WHOIS/Web-based WHOIS) 24-hour total downtime / week Data Escrow Breach of the Registry Agreement as described in Specification 2, Part B, Section 6.

• Refers to the Domain Name System as specified in RFCs 1034, 1035, and related RFCs. DNSSEC proper resolution.

• DNS Service (all servers) 4-­‐hour total downtime / week DNSSEC proper resolution 4-­‐hour total downtime / week EPP 24-­‐hour total downtime / week RDDS (WHOIS/Web-­‐based WHOIS) 24-­‐hour total downtime / week Data Escrow Breach of the Registry Agreement as described in Specification 2, Part B, Section 6.

• DNS Service (all servers) 4-­‐hour total downtime / week DNSSEC proper resolution 4-­‐hour total downtime / week EPP 24-­‐hour total downtime / week RDDS (WHOIS/Web-­‐ based WHOIS) 24-­‐hour total downtime / week Data Escrow Breach of the Registry Agreement as described in Specification 2, Part B, Section 6.

• Registry shall also publish in its website the DNSSEC Practice Statements (DPS) describing critical security controls and procedures for key material storage, access and usage for its own keys and secure acceptance of registrants’ public-key material.

• DNSSEC validation must be active and use the IANA DNS Root Key Signing Key set (available at ▇▇▇▇▇://▇▇▇.▇▇▇▇.▇▇▇/dnssec/files) as a trust anchor for Registry Operator’s Registry Services making use of data obtained via DNS responses.

• DNS Service 4-hour total downtime / week DNSSEC proper resolution 4-hour total downtime / week EPP 24-hour total downtime / week RDDS 24-hour total downtime / week Data Escrow Reaching any of the criteria for the release of deposits described in Specification 2, Part B, Section 6.2 through Section 6.6.

• DNS Service (all servers) 4-hour total downtime / week DNSSEC proper resolution 4-hour total downtime / week EPP 24-hour total downtime / week RDDS (WHOIS/Web- based WHOIS) 24-hour total downtime / week Data Escrow Breach of the Registry Agreement as described in Specification 2, Part B, Section 6.

More Definitions of DNSSEC

DNSSEC means the file is required if the Registry

DNSSEC means domain name system security extensions.