[DNSOP] Updated I-D: draft-pro-adp-agent-discovery-01 — SVCB-first + IANA registration
Bin Lian <[email protected]>
| Newsgroups | gmane.ietf.dnsop |
|---|---|
| Message-ID | <CAK6fpe2ahqY-bzajn87=aCjboq2btK_=N8VmUL2x=pSwwCe1jw@mail.gmail.com> |
Hi DNSOP, We've updated draft-pro-adp-agent-discovery to -01. The major changes from -00: 1. SVCB-first DNS discovery (RFC 9460), delegating the DNS layer to DNS-AID (draft-mozleywilliams-dnsop-dnsaid) for SvcParamKey registration (bap, cap, cap-sha256, well-known). 2. TLSA + DNSSEC for DANE-based TLS endpoint authentication (RFC 6698). 3. Four-level trust escalation model: dns-verified → dane-verified → key-verified → peer-verified. 4. The original TXT+SRV scheme from -00 is retained as a documented fallback for backward compatibility. 5. IANA registered "ai-adp" as the service name in the Service Name and Transport Protocol Port Number Registry on 2026-06-12. The SVCB-first approach aligns ADP's DNS layer with the ongoing work in dnsop. We'd appreciate any feedback on the SVCB parameter usage, the ALPN negotiation strategy, and the trust escalation model. I-D: https://datatracker.ietf.org/doc/draft-pro-adp-agent-discovery/ Repo: https://github.com/harrylian8766/adp-protocol Thanks, Harry _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]