COMMUNITY

NLnet Labs has a long history of supporting an Open Internet and Open Standards. Here is an overview of some of our work in the Internet Engineering Task Force over the years.
Draft: dry-run DNSSEC
Y. Thessalonikefs (NLnet Labs), W. Toorop (NLnet Labs), R. Arends (ICANN)

RFC9156: DNS Query Name Minimisation to Improve Privacy
S. Bortzmeyer (AFNIC), R. Dolmans (NLnet Labs), P. Hoffman (ICANN)

RFC9103: DNS Zone Transfer-over-TLS
W. Toorop (NLnet Labs), S. Dickinson (Sinodun IT), S. Sahib (Salesforce), P. Aras (Salesforce), A. Mankin (Salesforce)

RFC9102: TLS DNSSEC Chain Extension
V. Dukhovni (Two Sigma),  S. Huque (Salesforce), W. Toorop (NLnet Labs), P. Wouters (Red Hat), M. Shore (Fastly)

Draft: Timing Parameters in the RPKI based Route Origin Validation Supply Chain
R. Bush (Internet Initiative Japan & Arrcus, Inc.), J. Borkenhagen (AT&T), T. Bruijnzeels (NLnet Labs), J. Snijders (NTT)

Draft: Delegation Revalidation by DNS Resolvers
S. Huque (Salesforce), P. Vixie (Farsight Security), R. Dolmans (NLnet Labs)

Draft: RPKI Signed Object for Trust Anchor Keys
C. Martinez (LACNIC), G. Michaelson (APNIC), T. Harrison (APNIC), T. Bruijnzeels (NLnet Labs), R. Austein (NLnet Labs)

RFC9018: Interoperable Domain Name System (DNS) Server Cookies
O. Sury (ISC), W. Toorop (NLnet Labs), D. Eastlake 3rd (Futurewei Technologies), M. Andrews (ISC)

Draft: DNS Catalog Zones
P.van Dijk (PowerDNS), L. Perltan (CZ.NIC), O. Sury (ISC), W. Toorop (NLnet Labs), L. Vandewoestijne

Draft: Resource Public Key Infrastructure (RPKI) Repository Requirements
T. Bruijnzeels (NLnet Labs), R. Bush (Internet Initiative Japan & Arrcus, Inc.), G. Michaelson (APNIC)

Draft: A profile for Resource Tagged Attestations (RTAs)
G. Michaelson (APNIC), G. Huston (APNIC), T. Harrison (APNIC), T. Bruijnzeels (NLnet Lbas), M. Hoffmann (NLnet Labs)

Draft: DNS Privacy Requirements for Exchanges between Recursive Resolvers and Authoritative Servers
J. Livingood (Comcast), A. Mayrhofer (nic.at GmbH), B. Overeinder (NLnet Labs)

RFC8932: Recommendations for DNS Privacy Service Operators
S. Dickinson (Sinodun IT), B. Overeinder (NLnet Labs), R. van Rijswijk-Deij (NLnet Labs), A. Mankin (Salesforce)

RFC8630: Resource Public Key Infrastructure (RPKI) Trust Anchor Locator
G. Huston (APNIC), S. Weiler (W3C/MIT), G. Michaelson(APNIC), S. Kent, T. Bruijnzeels (NLnet Labs)

RFC8488: RIPE NCC's Implementation of Resource Public Key Infrastructure (RPKI) Certificate Tree Validation
O. Muravskiy (RIPE NCC), T. Bruijnzeels (NLnet Labs)

RFC8416: Simplified Local Internet Number Resource Management with the RPKI (SLURM)
D. Ma (ZDNS), D. Mandelberg, T. Bruijnzeels (NLnet Labs)

RFC7129: Authenticated Denial of Existence in the DNS
R. Gieben (Google), W. Mekking (NLnet Labs)

RFC7127: Characterization of Proposed Standards
O. Kolkman (NLnet Labs), S. Bradner (Harvard University), S. Turner (IECA, Inc.)

RFC6781: DNSSEC Operational Practices, Version 2
O. Kolkman (NLnet Labs), W. Mekking (NLnet Labs), R. Gieben (SIDN Labs)

RFC6672: DNAME Redirection in the DNS
S. Rose (NIST), W. Wijngaards (NLnet Labs), June 2012

RFC6635: RFC Editor Model (Version 2)
O. Kolkman (NLnet Labs), J. Halpern (Ericsson)

RFC6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC
P. Hoffman (VPN Consortium), W.C.A. Wijngaards (NLnet Labs)

RFC5702: Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC
J. Jansen (NLnet Labs)

RFC4641: DNSSEC Operational Practices
O. Kolkman (NLnet Labs), R. Gieben (NLnet Labs)

RFC3904: Evaluation of IPv6 Transition Mechanisms for Unmanaged Networks
C. Huitema (Microsoft), R. Austein (ISC), S. Satapati (Cisco Systems, Inc.), R. van der Pol (NLnet Labs)

RFC3750: Unmanaged Networks IPv6 Transition Scenarios
C. Huitema (Microsoft), R. Austein (ISC), S. Satapati (Cisco Systems, Inc.), R. van der Pol (NLnet Labs)