Ç¥ÁØÈ­ Âü¿©¾È³»

TTAÀÇ Ç¥ÁØÇöȲ

Ȩ > Ç¥ÁØÈ­ °³¿ä > TTAÀÇ Ç¥ÁØÇöȲ

Ç¥ÁعøÈ£ TTAE.IF-RFC4470 ±¸Ç¥ÁعøÈ£
Á¦°³Á¤ÀÏ 2011-12-21 ÃÑÆäÀÌÁö 9
ÇѱÛÇ¥Áظí NSEC ·¹ÄÚµå¿Í DNSSEC ¿Â¶óÀÎ ¼­¸í
¿µ¹®Ç¥Áظí Minimally Covering NSEC Records and DNSSEC On-line Signing
Çѱ۳»¿ë¿ä¾à º» Ç¥ÁØÀº NSEC ·¹ÄÚµå·Î ÀÎÇØ Á¸¾È¿¡ Á¸ÀçÇÏ´Â ¸ðµç µµ¸ÞÀÎ ¸®½ºÆ®¸¦ ¾Ë¾Æ³¾ ¼ö ÀÖ´Â Zone Walking(Á¸ ¸ñ·ÏÈ­) ¹®Á¦¸¦ ÇØ°áÇϱâ À§ÇÑ ¹æ¾ÈÀ» Á¦½ÃÇÑ´Ù. ±âÁ¸ NSEC ·¹ÄÚµåÀÇ ÇüŸ¦ º¸´Ù °£´ÜÇÏ°Ô ÀçÆí¼ºÇÏ¿© º¸¿©ÁÜÀ¸·Î½á Zone Walking ¹®Á¦¸¦ ÇØ°áÇÑ´Ù.
¿µ¹®³»¿ë¿ä¾à This document describes how to construct DNSSEC NSEC resource records that cover a smaller range of names than called for by RFC 4034. By generating and signing these records on demand, authoritative name servers can effectively stop the disclosure of zone contents otherwise made possible by walking the chain of NSEC records in a signed zone.
±¹Á¦Ç¥ÁØ
°ü·ÃÆÄÀÏ TTAE.IF-RFC4470.pdf TTAE.IF-RFC4470.pdf            

ÀÌÀü
¹üÁ¤ºÎ µ¥ÀÌÅÍÂüÁ¶¸ðµ¨ 2.1
´ÙÀ½
½Ç³» À̵¿·Îº¿ÀÇ Á¤Áö½Ã °íÁ¤ Àå¾Ö¹° °¨Áö¼º´É ÃøÁ¤¹æ¹ý