{
  "number": 7646,
  "title": "Definition and Use of DNSSEC Negative Trust Anchors",
  "authors": [
    "P. Ebersman",
    "W. Kumari",
    "C. Griffiths",
    "J. Livingood",
    "R. Weber"
  ],
  "published": "2015-09",
  "status": "Informational",
  "stream": "IETF",
  "area": "ops",
  "working_group": "dnsop",
  "pages": 16,
  "formats": [
    "TXT",
    "HTML"
  ],
  "abstract": "DNS Security Extensions (DNSSEC) is now entering widespread deployment. However, domain signing tools and processes are not yet as mature and reliable as those for non-DNSSEC-related domain administration tools and processes. This document defines Negative Trust Anchors (NTAs), which can be used to mitigate DNSSEC validation failures by disabling DNSSEC validation at specified domains.",
  "keywords": [
    "NTA",
    "ISP",
    "Internet Service Provider",
    "DNS",
    "DNSSEC",
    "Negative Trust Anchors"
  ],
  "draft": "draft-ietf-dnsop-negative-trust-anchors-13",
  "doi": "10.17487/RFC7646",
  "urls": {
    "html": "https://rfc.dk/rfc7646/",
    "text": "https://rfc.dk/rfc7646.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc7646",
    "datatracker": "https://datatracker.ietf.org/doc/rfc7646/"
  },
  "text_modified": "2015-09-23T22:06:33Z"
}