DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms

Created

• 2003-10-31

Last Updated

• 2026-01-13

Available Formats

• XML
• HTML
• TXT

Digest Algorithms

Registration Procedure(s)

• Standards Action or Specification Required

Expert(s)

• Mark Andrews, Roy Arends, Warren Kumari, Wes Hardaker

Reference

• RFC 3658: Delegation Signer (DS) Resource Record (RR)
• RFC 4034: Resource Records for the DNS Security Extensions
• RFC 4035: Protocol Modifications for the DNS Security Extensions
• RFC 9157: Revised IANA Considerations for DNSSEC
• RFC 9904: DNSSEC Cryptographic Algorithm Recommendation Update Process

Note

Adding a new entry to the "Digest Algorithms" registry with a recommended value of "MAY" in the "Use for DNSSEC Delegation”, "Use for DNSSEC Validation", "Implement for DNSSEC Delegation", or "Implement for DNSSEC Validation" columns SHALL follow the Specification Required policy as defined in RFC 8126.

Adding a new entry to, or changing an existing value in, the "Digest Algorithms" registry that has any value other than “MAY" in the "Use for DNSSEC Delegation", "Use for DNSSEC Validation”, "Implement for DNSSEC Delegation", or "Implement for DNSSEC Validation" columns requires Standards Action.

If an item is not marked as "RECOMMENDED", it does not necessarily mean that it is flawed; rather, it indicates that the item either has not been through the IETF consensus process, has limited applicability, or is intended only for specific use cases.

Available Formats

• CSV