This Internet-Draft is no longer active. Unofficial copies of old Internet-Drafts can be found here:
http://tools.ietf.org/id/draft-ietf-dnsext-dnssec-opt-in.
Abstract:
In the DNS security (DNSSEC) extensions, delegations to unsigned subzones
are cryptographically secured. Maintaining this cryptography is not always practical or necessary. This document
describes an experimental "Opt-In" model that allows administrators to omit this cryptography and manage
the cost of adopting DNSSEC with large zones. This memo defines an Experimental
Protocol for the Internet community.
Authors:
Mark Kosters <markk@verisign.com>
Roy Arends <roy@nominet.org.uk>
David Blacka <davidb@verisign.com>
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)
datatracker.ietf.org