Technical Standards

RFCs, internationalized domain names (IDN), Punycode, RDAP, and related standards.

RDAP (Protocolo de Acceso a Datos de Registro)

Modern, structured replacement for WHOIS using JSON over HTTPS.

EPP (Protocolo de Aprovisionamiento Extensible)

Protocol for registrar-registry communication to manage domains.

IDN (Nombre de Dominio Internacionalizado)

Domain name containing non-ASCII characters from various writing systems.

Punycode

ASCII encoding for internationalized domain names (xn-- prefix).

TTL (Tiempo de Vida)

DNS record value specifying cache duration in seconds.

Anycast DNS

Network method routing DNS queries to the nearest of multiple servers.

DNS-over-HTTPS (DoH)

Protocol encrypting DNS queries over HTTPS for privacy.

DNS-over-TLS (DoT)

Protocol encrypting DNS queries over TLS on port 853.

Depósito en Custodia de Datos

ICANN-required backup of registration data with a trusted third party.

Propagación DNS

Time for DNS changes to spread across all resolvers worldwide.

Registro DNS Comodín

DNS record using * to match all undefined subdomains.

Registro Glue

A/AAAA record in parent zone preventing circular nameserver dependencies.

RFC (Solicitud de Comentarios)

IETF formal document defining internet protocols and standards.

IDNA (Nombres de Dominio Internacionalizados en Aplicaciones)

Technical framework governing how international characters are validated and encoded in domain names.

Protocolo WHOIS

Plain-text domain lookup protocol on TCP port 43, being replaced by RDAP.

DNS-over-QUIC (DoQ)

DNS encryption over QUIC (UDP port 853), offering lower latency than DoH or DoT.

ECS (Subred de Cliente EDNS)

DNS extension sharing partial client IP with authoritative servers for geolocation-based responses.

TSIG (Firma de Transacción)

Shared-secret HMAC mechanism authenticating DNS messages between servers.

AXFR / IXFR (Transferencia de Zona)

Protocol for replicating DNS zone data from primary to secondary nameservers.

NSEC / NSEC3 (Negación de Existencia en DNSSEC)

DNSSEC record types cryptographically proving a domain name does not exist.

Registro DNSKEY

DNS record holding the public key used to verify DNSSEC signatures in a zone.

Registro RRSIG

Cryptographic signature record attached to DNS record sets for DNSSEC validation.