[DNSOP] I-D Action: draft-ietf-dnsop-dnssec-automation-05. txt
[email protected] Sun, 05 Jul 2026 15:50:40 -0700
| Newsgroups | gmane.ietf.dnsop |
|---|---|
| Message-ID | <178329184011.267540.15304207834293567037@dt-datatracker-57b5d8f849-zrqfx> |
Internet-Draft draft-ietf-dnsop-dnssec-automation-05.txt is now available. It
is a work item of the Domain Name System Operations (DNSOP) WG of the IETF.
Title: DNSSEC automation
Authors: Ulrich Wisser
Shumon Huque
Johan Stenstam
Name: draft-ietf-dnsop-dnssec-automation-05.txt
Pages: 15
Dates: 2026-07-05
Abstract:
This document describes an algorithm and protocol to automate the
setup, operations, and decommissioning of Multi-Signer DNSSEC
[RFC8901] configurations. To accomplish this, it employs Model 2 of
the multi-signer specification (where each operator has their own
distinct KSK and ZSK sets, or CSK sets), management of DS records
from the parent via CDS/CDNSKEY [RFC8078], and Child-to-Parent
Synchronization in DNS [RFC7477].
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-automation/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-dnsop-dnssec-automation-05.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-dnssec-automation-05
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]