<?xml version='1.0'?>

<reference anchor='RFC2137'>

<front>
<title abbrev='SDNSDU'>Secure Domain Name System Dynamic Update</title>
<author initials='D.E.' surname='Eastlake' fullname='Donald E. Eastlake, 3rd'>
<organization>CyberCash, Inc.</organization>
<address>
<postal>
<street>318 Acton Street</street>
<street>Carlisle</street>
<street>MA 01741</street>
<country>USA</country></postal>
<phone>+1 508-287-4877</phone>
<email>dee@cybercash.com</email></address></author>
<date month='April' year='1997' />
<area>Security</area>
<keyword>DNSSEC</keyword>
<keyword>cryptographic</keyword>
<keyword>digital signature</keyword>
<keyword>domain name</keyword>
<keyword>domain name system</keyword>
<keyword>security</keyword>
<abstract>
<t>
   Domain Name System (DNS) protocol extensions have been defined to
   authenticate the data in DNS and provide key distribution services
   .  DNS Dynamic Update operations have also been defined
   , but without a detailed description of security for the
   update operation.  This memo describes how to use DNSSEC digital
   signatures covering requests and data to secure updates and restrict
   updates to those authorized to perform them as indicated by the
   updater&apos;s possession of cryptographic keys.
</t></abstract></front>

<seriesInfo name='RFC' value='2137' />
<format type='HTML' octets='35693' target='http://xml.resource.org/public/rfc/html/rfc2137.html' />
<format type='XML' octets='24677' target='http://xml.resource.org/public/rfc/xml/rfc2137.xml' />
</reference>
