Technical Standards

RFCs, internationalized domain names (IDN), Punycode, RDAP, and related standards.

RDAP (Protocolo de Acesso a Dados de Registro)

Modern, structured replacement for WHOIS using JSON over HTTPS.

EPP (Protocolo de Provisionamento Extensível)

Protocol for registrar-registry communication to manage domains.

IDN (Nome de Domínio Internacionalizado)

Domain name containing non-ASCII characters from various writing systems.

Punycode

ASCII encoding for internationalized domain names (xn-- prefix).

TTL (Tempo de Vida)

DNS record value specifying cache duration in seconds.

Anycast DNS

Network method routing DNS queries to the nearest of multiple servers.

DNS-over-HTTPS (DoH)

Protocol encrypting DNS queries over HTTPS for privacy.

DNS-over-TLS (DoT)

Protocol encrypting DNS queries over TLS on port 853.

Custódia de Dados (Data Escrow)

ICANN-required backup of registration data with a trusted third party.

Propagação DNS

Time for DNS changes to spread across all resolvers worldwide.

Registro DNS Curinga

DNS record using * to match all undefined subdomains.

Registro Glue

A/AAAA record in parent zone preventing circular nameserver dependencies.

RFC (Solicitação de Comentários)

IETF formal document defining internet protocols and standards.

IDNA (Nomes de Domínio Internacionalizados em Aplicações)

Technical framework governing how international characters are validated and encoded in domain names.

Protocolo WHOIS

Plain-text domain lookup protocol on TCP port 43, being replaced by RDAP.

DNS-over-QUIC (DoQ)

DNS encryption over QUIC (UDP port 853), offering lower latency than DoH or DoT.

ECS (Sub-rede do Cliente EDNS)

DNS extension sharing partial client IP with authoritative servers for geolocation-based responses.

TSIG (Assinatura de Transação)

Shared-secret HMAC mechanism authenticating DNS messages between servers.

AXFR / IXFR (Transferência de Zona)

Protocol for replicating DNS zone data from primary to secondary nameservers.

NSEC / NSEC3 (Negação de Existência no DNSSEC)

DNSSEC record types cryptographically proving a domain name does not exist.

Registro DNSKEY

DNS record holding the public key used to verify DNSSEC signatures in a zone.

Registro RRSIG

Cryptographic signature record attached to DNS record sets for DNSSEC validation.