%% You should probably cite rfc7646 instead of this I-D. @techreport{ietf-dnsop-negative-trust-anchors-11, number = {draft-ietf-dnsop-negative-trust-anchors-11}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-dnsop-negative-trust-anchors/11/}, author = {P Ebersman and Chris Griffiths and Warren "Ace" Kumari and Jason Livingood and Ralf Weber}, title = {{Definition and Use of DNSSEC Negative Trust Anchors}}, pagetotal = 18, year = 2015, month = jul, day = 14, abstract = {DNS Security Extensions (DNSSEC) is now entering widespread deployment. However, domain signing tools and processes are not yet as mature and reliable as those for non-DNSSEC-related domain administration tools and processes. This document defines Negative Trust Anchors which can be used to mitigate DNSSEC validation failures by disabling DNSSEC validation at specified domains. {[}RFC Editor: Please remove this before publication. This document is being stored in github at https://github.com/wkumari/draft-livingood- dnsop-negative-trust-anchors . Authors accept pull requests, and keep the latest (edit buffer) versions there, so commenters can follow along at home.{]}}, }