Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to find the most recent RFC on HSTS in DNS (or rather said DNSSEC), but can only find this year old one in expired draft status

Where can I find the most current guidance on STS in DNS? If it's not available yet, how can I keep informed of the latest developments?

share|improve this question
up vote 4 down vote accepted

Click the link in the header: this draft dated Mar 2012 replaces the one you linked, and expires in Sep 2012.

See also the websec working group.

share|improve this answer
I think that question was about current status of a "more workable solution can be achieved by including HSTS data inside DNS records, and accessing them securely via DNSSEC" (from wikipedia), not about current status of HSTS itself – Andrei Botalov Oct 25 '11 at 18:42
Thanks @AndreyBotalov outside of the header route, or the dnssec route, is there a better way you know of? – LamonteCristo Oct 25 '11 at 22:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.