RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)

摘要

This document describes how to produce RSA/SHA1 SIG resource records(RRs) in Section 3 and, so as to completely replace RFC 2537,describes how to produce RSA KEY RRs in Section 2.Since the adoption of a Proposed Standard for RSA signatures in theDNS (Domain Name Space), advances in hashing have been made. A newDNS signature algorithm is defined to make these advances availablein SIG RRs. The use of the previously specified weaker mechanism isdeprecated. The algorithm number of the RSA KEY RR is changed tocorrespond to this new SIG algorithm. No other changes are made toDNS security.