Question

2.6.11. 参考链接

2.6.11.1. RFC

• RFC 920 Domain Requirements
• RFC 1034 DOMAIN NAMES CONCEPTS AND FACILITIES
• RFC 1035 DOMAIN NAMES IMPLEMENTATION AND SPECIFICATION
• RFC 1123 Requirements for Internet Hosts -- Application and Support
• RFC 2535 Domain Name System Security Extensions
• RFC 2930 Secret Key Establishment for DNS (TKEY RR)
• RFC 2931 DNS Request and Transaction Signatures ( SIG(0)s )
• RFC 3596 Legacy Resolver Compatibility for Delegation Signer (DS)
• RFC 3755 DNS Extensions to Support IP Version 6
• RFC 5001 Automated Updates of DNS Security (DNSSEC) Trust Anchors
• RFC 5936 DNS Zone Transfer Protocol
• RFC 5966 DNS Transport over TCP - Implementation Requirements
• RFC 6376 DomainKeys Identified Mail (DKIM) Signatures
• RFC 6762 Multicast DNS
• RFC 6891 Extension Mechanisms for DNS (EDNS(0))
• RFC 6895 DNS IANA Considerations
• RFC 7766 DNS Transport over TCP - Implementation Requirements
• RFC 7858 Specification for DNS over Transport Layer Security (TLS)
• RFC 7871 Client Subnet in DNS Queries
• RFC 8082 NXDOMAIN
• RFC 8482 Providing Minimal-Sized Responses to DNS Queries That Have QTYPE=ANY
• RFC 8484 DNS Queries over HTTPS (DoH)
• RFC 8490 DNS Stateful Operations
• RFC 8499 DNS Terminology

2.6.11.1.1. Whois 相关

• RFC 812 NICNAME/WHOIS
• RFC 954 NICNAME/WHOIS
• RFC 2167 Referral Whois (RWhois) Protocol V1.5
• RFC 3912 WHOIS Protocol Specification
• RFC 7485 Inventory and Analysis of WHOIS Registration Objects

2.6.11.1.2. RDAP 相关

• RFC7480 HTTP Usage in the Registration Data Access Protocol (RDAP)
• RFC7481 Security Services for the Registration Data Access Protocol (RDAP)
• RFC7484 Finding the Authoritative Registration Data (RDAP) Service
• RFC8056 Registration Data Access Protocol (RDAP) Object Tagging
• RFC9082 Registration Data Access Protocol (RDAP) Query Format
• RFC9083 JSON Responses for the Registration Data Access Protocol (RDAP)

2.6.11.2. 相关标准

• Registration Data Access Protocol (RDAP)

2.6.11.3. 工具

• Unbound
• bind9

2.6.11.4. 研究文章

• DGA域名的今生前世：缘起、检测、与发展
• DNSSEC原理和分析
• Plohmann D, Yakdan K, Klatt M, et al. A comprehensive measurement study of domain generating malware[C]//25th {USENIX} Security Symposium ({USENIX} Security 16). 2016: 263-278.
• An End-to-End Large-Scale Measurement of DNS-over-Encryption: How Far Have We Come?

2.6.11.5. 相关CVE

• SIGRed – Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers