I-D Action: draft-barrett-dnsop-domain-set-00.txt

Internet-Draft draft-barrett-dnsop-domain-set-00.txt is now available.

   Title:   The Domain Set Discovery Protocol (domain-set)
   Authors: Thomas Barrett
            Chris Schaub
            Andrew Barrett
            P Kowalik
   Name:    draft-barrett-dnsop-domain-set-00.txt
   Pages:   36
   Dates:   2026-08-20

Abstract:

   Organizations commonly operate under multiple domain names: a primary
   website, legacy names, defensive registrations, divisional brands,
   and names in restricted or verified top-level domains.  No standard
   mechanism exists for a domain owner to declare, in a machine-readable
   and verifiable way, which domains belong to the same organization.
   This document defines "domain-set", a protocol by which domain
   operators publish membership in a set of domains using a DNS TXT
   record as the discovery mechanism.  The record either lists the
   members directly or references an extensible Domain Set Manifest
   retrieved over HTTPS.  Mutual attestation is the validation
   requirement: a link between two domains is valid only when both
   domains independently publish records naming each other.  Every
   direction of a link MUST be retrieved over an authenticated channel,
   by DNSSEC or by the Web PKI.  The protocol enables browsers, security
   tooling, and AI systems to answer the question "are these two domains
   operated by the same organization?" from first-party, owner-published
   data rather than inference.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-barrett-dnsop-domain-set/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-barrett-dnsop-domain-set-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]