参考链接
========================================

RFC
----------------------------------------
- `RFC 920 Domain Requirements <https://www.rfc-editor.org/rfc/rfc920>`_
- `RFC 1034 DOMAIN NAMES CONCEPTS AND FACILITIES <https://tools.ietf.org/html/rfc1034>`_
- `RFC 1035 DOMAIN NAMES IMPLEMENTATION AND SPECIFICATION <https://tools.ietf.org/html/rfc1035>`_
- `RFC 1123 Requirements for Internet Hosts -- Application and Support <https://tools.ietf.org/html/rfc1123>`_
- `RFC 2535 Domain Name System Security Extensions <https://tools.ietf.org/html/rfc2535>`_
- `RFC 2930 Secret Key Establishment for DNS (TKEY RR) <https://tools.ietf.org/html/rfc2930>`_
- `RFC 2931 DNS Request and Transaction Signatures ( SIG(0)s ) <https://tools.ietf.org/html/rfc2931>`_
- `RFC 3596 Legacy Resolver Compatibility for Delegation Signer (DS) <https://tools.ietf.org/html/rfc3596>`_
- `RFC 3755 DNS Extensions to Support IP Version 6 <https://tools.ietf.org/html/rfc3755>`_
- `RFC 5001 Automated Updates of DNS Security (DNSSEC) Trust Anchors <https://tools.ietf.org/html/rfc5001>`_
- `RFC 5936 DNS Zone Transfer Protocol <https://tools.ietf.org/html/rfc5936>`_
- `RFC 5966 DNS Transport over TCP - Implementation Requirements <https://tools.ietf.org/html/rfc5966>`_
- `RFC 6376 DomainKeys Identified Mail (DKIM) Signatures <https://tools.ietf.org/html/rfc6376>`_
- `RFC 6762 Multicast DNS <https://tools.ietf.org/html/rfc6762>`_
- `RFC 6891 Extension Mechanisms for DNS (EDNS(0)) <https://tools.ietf.org/html/rfc6891>`_
- `RFC 6895 DNS IANA Considerations <https://tools.ietf.org/html/rfc6895>`_
- `RFC 7766 DNS Transport over TCP - Implementation Requirements <https://tools.ietf.org/html/rfc7766>`_
- `RFC 7858 Specification for DNS over Transport Layer Security (TLS) <https://tools.ietf.org/html/rfc7858>`_
- `RFC 7871 Client Subnet in DNS Queries <https://tools.ietf.org/html/rfc7871>`_
- `RFC 8082 NXDOMAIN <https://tools.ietf.org/html/rfc8082>`_
- `RFC 8482 Providing Minimal-Sized Responses to DNS Queries That Have QTYPE=ANY <https://tools.ietf.org/html/rfc8482>`_
- `RFC 8484 DNS Queries over HTTPS (DoH) <https://tools.ietf.org/html/rfc8484>`_
- `RFC 8490 DNS Stateful Operations <https://tools.ietf.org/html/rfc8490>`_
- `RFC 8499 DNS Terminology <https://tools.ietf.org/html/rfc8499>`_

Whois 相关
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- `RFC 812 NICNAME/WHOIS <https://tools.ietf.org/html/rfc812>`_
- `RFC 954 NICNAME/WHOIS <https://tools.ietf.org/html/rfc954>`_
- `RFC 2167 Referral Whois (RWhois) Protocol V1.5 <https://tools.ietf.org/html/rfc2167>`_
- `RFC 3912 WHOIS Protocol Specification <https://tools.ietf.org/html/rfc3912>`_
- `RFC 7485 Inventory and Analysis of WHOIS Registration Objects <https://tools.ietf.org/html/rfc7485>`_

RDAP 相关
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- `RFC7480 HTTP Usage in the Registration Data Access Protocol (RDAP) <https://tools.ietf.org/html/rfc7480>`_
- `RFC7481 Security Services for the Registration Data Access Protocol (RDAP) <https://tools.ietf.org/html/rfc7481>`_
- `RFC7484 Finding the Authoritative Registration Data (RDAP) Service <https://tools.ietf.org/html/rfc7484>`_
- `RFC8056 Registration Data Access Protocol (RDAP) Object Tagging <https://tools.ietf.org/html/rfc8056>`_
- `RFC9082 Registration Data Access Protocol (RDAP) Query Format <https://tools.ietf.org/html/rfc9082>`_
- `RFC9083 JSON Responses for the Registration Data Access Protocol (RDAP) <https://tools.ietf.org/html/rfc9083>`_

相关标准
----------------------------------------
- `Registration Data Access Protocol (RDAP) <https://about.rdap.org/>`_

工具
----------------------------------------
- `Unbound <https://github.com/NLnetLabs/unbound>`_
- `bind9 <https://github.com/isc-projects/bind9>`_

研究文章
----------------------------------------
- `DGA域名的今生前世：缘起、检测、与发展  <https://mp.weixin.qq.com/s/xbf0Qbppk8R0nx89Pb4YTg>`_
- `DNSSEC原理和分析 <https://blog.thecjw.me/?p=1221>`_
- Plohmann D, Yakdan K, Klatt M, et al. A comprehensive measurement study of domain generating malware[C]//25th {USENIX} Security Symposium ({USENIX} Security 16). 2016: 263-278.
- An End-to-End Large-Scale Measurement of DNS-over-Encryption: How Far Have We Come?

相关CVE
----------------------------------------
- `SIGRed – Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers <https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin-exploiting-a-17-year-old-bug-in-windows-dns-servers/>`_