Internet-Draft draft-ietf-dnsop-dnssec-automation-02.txt is now available. It
is a work item of the Domain Name System Operations (DNSOP) WG of the IETF.
Title: DNSSEC automation
Authors: Ulrich Wisser
Shumon Huque
Johan Stenstam
Name: draft-ietf-dnsop-dnssec-automation-02.txt
Pages: 11
Dates: 2023-10-22
Abstract:
This document describes an algorithm and protocol to automate the
setup, operations, and decomissioning of Multi-Signer DNSSEC
[RFC8901] configurations. It employs Model 2 of the Multi-Signer
specification, where each operator has their own distinct KSK and ZSK
sets (or CSK sets), Managing DS Records from the Parent via CDS/
CDNSKEY [RFC8078], and Child-to-Parent Synchronization in DNS
[RFC7477] to accomplish this.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-automation/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-dnsop-dnssec-automation-02.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-dnssec-automation-02
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
