Technical Standards

RFCs, internationalized domain names (IDN), Punycode, RDAP, and related standards.

RDAP (Protocole d'Accès aux Données d'Enregistrement)

Modern, structured replacement for WHOIS using JSON over HTTPS.

EPP (Protocole de Provisionnement Extensible)

Protocol for registrar-registry communication to manage domains.

IDN (Nom de Domaine Internationalisé)

Domain name containing non-ASCII characters from various writing systems.

Punycode

ASCII encoding for internationalized domain names (xn-- prefix).

TTL (Durée de Vie)

DNS record value specifying cache duration in seconds.

Anycast DNS

Network method routing DNS queries to the nearest of multiple servers.

DNS-over-HTTPS (DoH)

Protocol encrypting DNS queries over HTTPS for privacy.

DNS-over-TLS (DoT)

Protocol encrypting DNS queries over TLS on port 853.

Séquestre de Données

ICANN-required backup of registration data with a trusted third party.

Propagation DNS

Time for DNS changes to spread across all resolvers worldwide.

Enregistrement DNS Générique

DNS record using * to match all undefined subdomains.

Enregistrement Glue

A/AAAA record in parent zone preventing circular nameserver dependencies.

RFC (Demande de Commentaires)

IETF formal document defining internet protocols and standards.

IDNA (Noms de Domaine Internationalisés dans les Applications)

Technical framework governing how international characters are validated and encoded in domain names.

Protocole WHOIS

Plain-text domain lookup protocol on TCP port 43, being replaced by RDAP.

DNS-over-QUIC (DoQ)

DNS encryption over QUIC (UDP port 853), offering lower latency than DoH or DoT.

ECS (Sous-réseau client EDNS)

DNS extension sharing partial client IP with authoritative servers for geolocation-based responses.

TSIG (Signature de Transaction)

Shared-secret HMAC mechanism authenticating DNS messages between servers.

AXFR / IXFR (Transfert de Zone)

Protocol for replicating DNS zone data from primary to secondary nameservers.

NSEC / NSEC3 (Déni d'existence DNSSEC)

DNSSEC record types cryptographically proving a domain name does not exist.

Enregistrement DNSKEY

DNS record holding the public key used to verify DNSSEC signatures in a zone.

Enregistrement RRSIG

Cryptographic signature record attached to DNS record sets for DNSSEC validation.