The IESG has approved the following document: - 'Operational Recommendations for DNSSEC Delegation Signer (DS) Automation' (draft-ietf-dnsop-ds-automation-09.txt) as Best Current Practice
This document is the product of the Domain Name System Operations Working Group. The IESG contact persons are Mahesh Jethanandani and Mohamed Boucadair. A URL of this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-dnsop-ds-automation/ Technical Summary Enabling support for automatic acceptance of DNSSEC Delegation Signer (DS) parameters from the Child DNS operator (via RFCs 7344, 8078, 9615) requires the parental agent, often a registry or registrar, to make a number of technical decisions around acceptance checks, error and sucess reporting, and multi-party issues such as concurrent updates. This document describes recommendations about how these points are best addressed in practice. Working Group Summary The DNS operations working group has a very broad membership, with varying interests in different topics. The deliberations and consensus on this draft was largely driven by a smaller subset of individuals that are involved in the topic area in both IETF and relevant industry circles (ICANN, ccTLD world, etc.). This was largely to be expected, so this was not seen as an obstacle to achieving consensus. Document Quality This work has been socialized for wider input in a variety of fora (like ICANN CPH TechOps, APTLD 88, ROW 14, CENTR Tech 53, DNS OARC 45, and ICANN 84). As indicated in the wrietup, there are a reasonable number of organizations (ccTLDs mostly) that have developed many of the mechanisms in this document, with a few others in the pipeline. Personnel The Document Shepherd for this document is Shumon Huque. The Responsible Area Director is Mohamed Boucadair. _______________________________________________ IETF-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]
