bk99.de entertain the web since 1997

bk99.de
RFC · DNSStandard explained

RFC 1034: DNS concepts and delegation

Summary

RFC 1034 explains the architecture, namespace, zones, resolvers and caching of the modern Domain Name System. DNS scales because responsibility is distributed and answers are cached. Faulty delegations have effects across organisational boundaries.

Ideas

  • Zones cut administrative areas out of the name tree.
  • Authoritative servers answer with data under their own responsibility.
  • Resolvers follow delegations or use recursive services.

Facts

  • RFC 1034 replaces RFC 882.

Remarks

  • RFC 1034 has the status “Internet Standard”; current errata and successor documents should also be checked.

Recommendations

  • Run at least two resilient authoritative servers.
  • Plan TTLs to match your change and outage requirements.

References

Read the RFC at the RFC Editor

Search the Web Archive

RFC · 2018

RFC 8484: DNS over HTTPS

RFC 8484 encapsulates DNS queries in HTTPS and thereby uses existing web transport and authentication mechanisms. DoH makes path-based observation and classic network diagnostics harder at the same time. Choosing the resolver remains a decision of trust.

RFC · 2016

RFC 7858: DNS over TLS

RFC 7858 describes encrypted DNS transport over TLS between a client and a recursive resolver. Transport encryption protects the path, not against the chosen resolver. Encryption can reduce observation and centralise trust.

RFC · 2003

RFC 3490: Internationalised domain names

RFC 3490 introduced IDNA so that Unicode domain names can be carried over the ASCII-based DNS. RFC 3490 was superseded by RFC 5890. Compatibility layers extend old infrastructure without breaking the protocol.