Definition and Use of DNSSEC Negative Trust Anchors
draft-livingood-dnsop-negative-trust-anchors-01
| Document | Type | Expired Internet-Draft (candidate for dnsop WG) | |
|---|---|---|---|
| Last updated | 2015-10-14 (latest revision 2014-10-23) | ||
| Stream | IETF | ||
| Intended RFC status | (None) | ||
| Formats |
Expired & archived
pdf
htmlized
bibtex
|
||
| Stream | WG state | Call For Adoption By WG Issued | |
| Document shepherd | No shepherd assigned | ||
| IESG | IESG state | Expired | |
| Consensus Boilerplate | Unknown | ||
| Telechat date | |||
| Responsible AD | (None) | ||
| Send notices to | (None) | ||
https://www.ietf.org/archive/id/draft-livingood-dnsop-negative-trust-anchors-01.txt
Abstract
DNS Security Extensions (DNSSEC) is now entering widespread deployment. However, domain signing tools and processes are not yet as mature and reliable as those for non-DNSSEC-related domain administration tools and processes. Negative Trust Anchors (described in this document) can be used to mitigate DNSSEC validation failures. [ Editor note: This document was originally draft-livingood-negative- trust-anchors-07 - renamved at the request of the DNSOP chairs ]
Authors
Ebersman P
(ebersman-ietf@dragon.net)
Chris Griffiths
(cgriffiths@gmail.com)
Warren Kumari
(warren@kumari.net)
Jason Livingood
(jason_livingood@cable.comcast.com)
Ralf Weber
(ralf.weber@nominum.com)
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)