Technische Standards
RFCs, internationalisierte Domainnamen (IDN), Punycode, RDAP und verwandte Standards.
RDAP (Registration Data Access Protocol)
Modern, structured replacement for WHOIS using JSON over HTTPS.
EPP (Extensible Provisioning Protocol)
Protocol for registrar-registry communication to manage domains.
IDN (Internationalisierter Domainname)
Domain name containing non-ASCII characters from various writing systems.
Punycode
ASCII encoding for internationalized domain names (xn-- prefix).
TTL (Time To Live)
DNS record value specifying cache duration in seconds.
Anycast DNS
Network method routing DNS queries to the nearest of multiple servers.
DNS-over-HTTPS (DoH)
Protocol encrypting DNS queries over HTTPS for privacy.
DNS-over-TLS (DoT)
Protocol encrypting DNS queries over TLS on port 853.
Daten-Treuhandschaft
ICANN-required backup of registration data with a trusted third party.
DNS-Propagierung
Time for DNS changes to spread across all resolvers worldwide.
Wildcard-DNS-Eintrag
DNS record using * to match all undefined subdomains.
Glue Record
A/AAAA record in parent zone preventing circular nameserver dependencies.
RFC (Anfrage um Kommentare)
IETF formal document defining internet protocols and standards.
IDNA (Internationalisierte Domainnamen in Anwendungen)
Technical framework governing how international characters are validated and encoded in domain names.
WHOIS-Protokoll
Plain-text domain lookup protocol on TCP port 43, being replaced by RDAP.
DNS-over-QUIC (DoQ)
DNS encryption over QUIC (UDP port 853), offering lower latency than DoH or DoT.
ECS (EDNS-Client-Subnetz)
DNS extension sharing partial client IP with authoritative servers for geolocation-based responses.
TSIG (Transaktionssignatur)
Shared-secret HMAC mechanism authenticating DNS messages between servers.
AXFR / IXFR (Zonentransfer)
Protocol for replicating DNS zone data from primary to secondary nameservers.
NSEC / NSEC3 (DNSSEC-Existenzverneinung)
DNSSEC record types cryptographically proving a domain name does not exist.
DNSKEY-Eintrag
DNS record holding the public key used to verify DNSSEC signatures in a zone.
RRSIG-Eintrag
Cryptographic signature record attached to DNS record sets for DNSSEC validation.