A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Domain Name System Operations WG of the IETF.
Title : DNSSEC automation
Authors : Ulrich Wisser
Shumon Huque
Filename : draft-ietf-dnsop-dnssec-automation-01.txt
Pages : 12
Date : 2023-02-06
Abstract:
This document describes an algorithm and a protocol to automate
DNSSEC Multi-Signer [RFC8901] "Multi-Signer DNSSEC Models" setup,
operations and decomissioning. Using Model 2 of the Multi-Signer
specification, where each operator has their own distinct KSK and ZSK
sets (or CSK sets), [RFC8078] "Managing DS Records from the Parent
via CDS/CDNSKEY" and [RFC7477] "Child-to-Parent Synchronization in
DNS" to accomplish this.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-automation/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-dnsop-dnssec-automation-01.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-dnssec-automation-01
Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
