I-D Action: draft-fbw-dnsop-dnszonehop-00.txt

internet-drafts@ietf.org Sun, 21 July 2024 08:34 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-fbw-dnsop-dnszonehop-00.txt
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <172155086877.284.9054542915623345990@dt-datatracker-659f84ff76-9wqgv>
Date: Sun, 21 Jul 2024 01:34:28 -0700
Message-ID-Hash: XC6NUWVSSF5ZNUCSTSPLNGJ4SGQRWBPY
Reply-To: internet-drafts@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/i-d-announce/Kw8uLWnzJZRONaec3IuH0o1yqDk>

Internet-Draft draft-fbw-dnsop-dnszonehop-00.txt is now available.

   Title:   Zone Hopping: A method to prevent zone-walking in DNSSEC
   Authors: Fatema Bannat Wala
            Stephan K Bohacek
            Nick Buraglio
   Name:    draft-fbw-dnsop-dnszonehop-00.txt
   Pages:   9
   Dates:   2024-07-21

Abstract:

   DNS Security Extension (DNSSEC) as defined by [RFC9364] was developed
   to address significant security integrity flaws in DNS.  Within
   certain circumstances, information leakage may be possible stemming
   from a known DNSSEC vulnerability that facilitates a process known as
   zone walking, which enables the efficient collection of all FQDNs
   from a given environment.  This document describes the problem space
   as outlined in [IEEE-ZoneHopping] and offers a potential solution,
   called Zone-Hopping, to aid in addressing the domain information
   leakage capable via Zone-walking while preserving the integrity of
   the records for which DNSSEC was originally introduced.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-fbw-dnsop-dnszonehop/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-fbw-dnsop-dnszonehop-00

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts

I-D Action: draft-fbw-dnsop-dnszonehop-00.txt internet-drafts