I-D Action: draft-ogud-dnsop-maintain-ds-00.txt

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



A New Internet-Draft is available from the on-line Internet-Drafts directories.


        Title           : Managing DS records from parent via CDS/CDNSKEY
        Authors         : Olafur Gudmundsson
                          Paul Wouters
	Filename        : draft-ogud-dnsop-maintain-ds-00.txt
	Pages           : 8
	Date            : 2015-10-15

Abstract:
   RFC7344 specifies how DNS trust can be maintained in-band between
   parent and child.  There are two features missing in that
   specification: initial trust setup and removal of trust anchor.  This
   document addresses both these omissions.

   Changing a domain's DNSSEC status can be a complicated matter
   involving many parties.  Some of these parties, such as the DNS
   operator, might not even be known by all organisations involved.  The
   inability to enable or disable DNSSEC via in-band signalling is seen
   as a problem or liability that prevents DNSSEC adoption at large
   scale.  This document adds a method for in-band signalling of DNSSEC
   status changes.

   Initial trust is considered a much harder problem, this document will
   seek to clarify and simplify the initial acceptance policy.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ogud-dnsop-maintain-ds/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ogud-dnsop-maintain-ds-00


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt



[Index of Archives]     [IETF]     [IETF Discussion]     [Linux Kernel]

  Powered by Linux