Confirmed users
299
edits
Security/DNSSEC-TLS-details: Difference between revisions
→Format of TLS Extension
No edit summary |
|||
| Line 92: | Line 92: | ||
== Format of TLS Extension == | == Format of TLS Extension == | ||
The "extension_data" field of the client hello extension currently consists of no data (i.e. it is empty and of zero length) and serves only as an indication that a DNSSEC chain has been requested. In the future this may be changed to allow for an optimization whereby the server can send less data. | |||
The "extension_data" field of the server hello extension contains "DNSSECChain" where: | |||
<nowiki> | |||
struct { | |||
RR resource_record_chain<1..> | |||
} DNSSECChain; | |||
</nowiki> | |||
Each resource record ("RR") in the chain is in wire format as described by the appropriate RFC (see for example [http://www.ietf.org/rfc/rfc1035.txt rfc 1035]). The contents of this chain are described [[Security/DNSSEC-TLS-details#DNSSEC Chains | above]]. | |||
== Test Plans == | == Test Plans == | ||