TSIG（事务签名）
Embed This Widget
Add the script tag and a data attribute to embed this widget.
Embed via iframe for maximum compatibility.
<iframe src="https://tldfyi.com/iframe/glossary/tsig/" width="420" height="400" frameborder="0" style="border:0;border-radius:10px;max-width:100%" loading="lazy"></iframe>Paste this URL in WordPress, Medium, or any oEmbed-compatible platform.
https://tldfyi.com/glossary/tsig/Add a dynamic SVG badge to your README or docs.
[](https://tldfyi.com/glossary/tsig/)Use the native HTML custom element.
事务签名（TSIG，RFC 8945）是一种使用共享密钥和HMAC加密对服务器之间[[dns|DNS]]消息进行身份验证的机制。TSIG常用于保护主备名称服务器之间的[[axfr|区域传输]]，以及对动态DNS更新请求进行认证。与保护数据传输至最终用户的[[dnssec|DNSSEC]]不同，TSIG在传输层保护服务器间的DNS通信。
示例
A primary nameserver configured with TSIG will reject zone transfer requests from secondary servers that don't present the correct shared secret, preventing unauthorized zone replication.