Protocol Modifications for the DNS Security Extensions

RFC 4035 specifies the protocol modifications to DNS resolvers, servers, and stub resolvers needed to support DNSSEC. It defines how DNSSEC-aware resolvers validate signatures, handle the DO bit, process NSEC records for authenticated denial of existence, and propagate security status.