Automating DNSSEC delegation trust maintenance
draft-kumari-ogud-dnsop-cds-05

Document Type Replaced Internet-Draft (individual)
Last updated 2013-10-05
Replaced by draft-ietf-dnsop-delegation-trust-maintainance
Stream (None)
Intended RFC status (None)
Formats
Expired & archived
plain text pdf html bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Replaced by draft-ietf-dnsop-delegation-trust-maintainance
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at
https://www.ietf.org/archive/id/draft-kumari-ogud-dnsop-cds-05.txt

Abstract

This document describes a method to allow DNS operators to more easily update DNSSEC Key Signing Keys using DNS as communication channel. This document does not address the initial configuration of trust anchors for a domain. The technique described is aimed at delegations in which it is currently hard to move information from the child to parent.

Authors

Warren Kumari (warren@kumari.net)
Ólafur Guðmundsson (ogud@ogud.com)
George Barwood (george.barwood@blueyonder.co.uk)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)