[dnsext] New RRtype "KREALM" in draft-vanrein-dnstxt-krb1-02.txt

[Rick van Rein <[e-mail]>]

Hello,

I am working on an I-D that allocates a new RRtype in DNS, named
KREALM.  This RR is meant to store Kerberos realm descriptions in DNS;
this has hitherto been desired but impossible to do securely, but
nowadays the broad acceptance of DNSSEC permits this facility.

Please let me know if you have any feedback or questions!

Cheers,

Rick van Rein
for ARPA2.net

> A new version of I-D, draft-vanrein-dnstxt-krb1-02.txt
> has been successfully submitted by Rick van Rein and posted to the
> IETF repository.
>
> Name:		draft-vanrein-dnstxt-krb1
> Revision:	02
> Title:		Kerberos Realm Descriptors in DNS (KREALM)
> Document date:	2015-09-03
> Group:		Individual Submission
> Pages:		15
> URL:            https://www.ietf.org/internet-drafts/draft-vanrein-dnstxt-krb1-02.txt
> Status:         https://datatracker.ietf.org/doc/draft-vanrein-dnstxt-krb1/
> Htmlized:       https://tools.ietf.org/html/draft-vanrein-dnstxt-krb1-02
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-vanrein-dnstxt-krb1-02
>
> Abstract:
>    This specification defines methods to determine Kerberos realm
>    descriptive information for services that are known by their DNS
>    name.  Currently, finding such information is done through static
>    mappings or educated guessing.  DNS can make this process more
>    dynamic, provided that DNSSEC is used to ensure authenticity of
>    resource records.
>