Hi,
This version adds an implementation section, as requested during the
working group session. We also added a paragraph about ZONEMD.
It would be really helpful if others could try out the procedures
mentioned in the document (with Knot or other implementations) to verify
that the text is sufficiently clear.
Kind regards,
Martin and Florian
PS: Yes, we've introduced a typo in section 4.6 while moving the draft
to the ietf-wg-dnsop repository. We will correct this in the next revision.
-------- Forwarded Message --------
Subject: [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-keyrestore-02.txt
Date: Mon, 10 Aug 2026 00:13:57 -0700
From: [email protected]
Reply-To: [email protected]
To: [email protected]
CC: [email protected]
Internet-Draft draft-ietf-dnsop-dnssec-keyrestore-02.txt is now
available. It
is a work item of the Domain Name System Operations (DNSOP) WG of the IETF.
Title: DNSSEC Key Restore
Authors: Florian Obser
Martin Pels
Name: draft-ietf-dnsop-dnssec-keyrestore-02.txt
Pages: 12
Dates: 2026-08-10
Abstract:
This document describes the issues surrounding the handling of DNSSEC
private keys in a DNSSEC signer. It presents operational guidance in
case a DNSSEC private key becomes inoperable.
Discussion Venues
This note is to be removed before publishing as an RFC.
Discussion of this document takes place on the Domain Name System
Operations Working Group mailing list ([email protected]), which is
archived at https://mailarchive.ietf.org/arch/browse/dnsop/.
Source for this draft and an issue tracker can be found at
https://github.com/ietf-wg-dnsop/draft-ietf-dnsop-dnssec-keyrestore.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-keyrestore/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-dnsop-dnssec-keyrestore-02.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-dnssec-keyrestore-02
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
