%% You should probably cite draft-ietf-dnsop-dnssec-automation instead of this I-D. @techreport{wisser-dnssec-automation-01, number = {draft-wisser-dnssec-automation-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-wisser-dnssec-automation/01/}, author = {Ulrich Wisser and Shumon Huque}, title = {{DNSSEC automation}}, pagetotal = 7, year = 2021, month = feb, day = 22, abstract = {This document describes an algorithm and a protocol to automate DNSSEC multi-signer {[}RFC8901{]} "Multi-Signer DNSSEC Models" setup, operations and decomissioning. It primarily deals with Model 2 of the Multi-Signer specification, where each operator has their own distinct KSK and ZSK sets (or CSK sets). It makes use of {[}RFC8078{]} "Managing DS Records from the Parent via CDS/CDNSKEY" and {[}RFC7477{]} "Child-to-Parent Synchronization in DNS" to accomplish this.}, }