Skip to main content

DNSSEC Key Restore
draft-fobser-dnsop-dnssec-keyrestore-01

Document Type Replaced Internet-Draft (candidate for dnsop WG)
Expired & archived
Authors Florian Obser , Martin Pels
Last updated 2026-04-19 (Latest revision 2025-10-16)
Replaced by draft-ietf-dnsop-dnssec-keyrestore
RFC stream Internet Engineering Task Force (IETF)
Intended RFC status (None)
Formats
Additional resources Mailing list discussion
Stream WG state Call For Adoption By WG Issued
Document shepherd (None)
IESG IESG state Replaced by draft-ietf-dnsop-dnssec-keyrestore
Consensus boilerplate Unknown
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

This document describes the issues surrounding the handling of DNSSEC private keys in a DNSSEC signer. It presents operational guidance in case a DNSSEC private key becoming inoperable. Discussion Venues This note is to be removed before publishing as an RFC. Discussion of this document takes place on the Domain Name System Operations Working Group mailing list (dnsop@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/dnsop/. Source for this draft and an issue tracker can be found at https://github.com/fobser/draft-fobser-dnsop-dnssec-keyrecovery.

Authors

Florian Obser
Martin Pels

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)