IETF Logo Mail Archive

Re: [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-bootstrapping-08.txt

Peter Thomassen <peter@desec.io> Thu, 11 April 2024 13:03 UTC

Return-Path: <peter@desec.io>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 489C6C14F61F for <dnsop@ietfa.amsl.com>; Thu, 11 Apr 2024 06:03:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.896
X-Spam-Level:
X-Spam-Status: No, score=-6.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=a4a.de
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V517Z4sYnYhw for <dnsop@ietfa.amsl.com>; Thu, 11 Apr 2024 06:03:38 -0700 (PDT)
Received: from mail.a4a.de (mail.a4a.de [IPv6:2a01:4f8:10a:1d5c:8000::8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4760C14F5FE for <dnsop@ietf.org>; Thu, 11 Apr 2024 06:03:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=a4a.de; s=20170825; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:From: References:To:Subject:MIME-Version:Date:Message-ID:Sender:Reply-To:Cc: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=o5Bl+FCvtCoL1l2npsmfA+8y+MnW139PdSDVrv/Y71M=; b=FGLvRu7XYAJmierKaXGlWAWMnY BqVNrJMqJC+rkjiA4tI7zmgpJLxYEwaKzIOs1IUxI9YW8+O/ffOs8I3MAf8nri0LePI7Afj/C9PAT WWc+V3czgVjLblQV6/8pnq7QPtzFG3Dkgw5+ymht9AMS71uVXoTGyQ/mtf8lwneGrnnubSDvGefrS HRP1mat+UJ2j7MHr+IvyPNcTpaDF6dNcuNHRhb/ignxQq+VZpaKnosdA2tof7px2cYA2qNR8wb9cy RiDkb7I9V2otqDW/HCpJRQmtB7wyEpeaZDwapblB3/ptNOZ4o3ER/gBDm7ucqnc/aLqhLWhc/Zz9J uq4X4YJg==;
Received: from [90.187.67.221] (helo=[192.168.55.171]) by mail.a4a.de with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.93) (envelope-from <peter@desec.io>) id 1ruu5W-00GhcM-EI for dnsop@ietf.org; Thu, 11 Apr 2024 15:03:35 +0200
Message-ID: <8f0fd8da-049c-4359-ba0c-1867e534786c@desec.io>
Date: Thu, 11 Apr 2024 15:03:33 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: dnsop@ietf.org
References: <171284035779.60468.1078020876686114830@ietfa.amsl.com>
Content-Language: en-US
From: Peter Thomassen <peter@desec.io>
In-Reply-To: <171284035779.60468.1078020876686114830@ietfa.amsl.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/-xtXS44ne5xn9UG7iu17yHgIkT0>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-bootstrapping-08.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Apr 2024 13:03:43 -0000

Dear DNSOP,

Here's a quick change log, all are editorial:

- Editorial changes from AD Review
- Updated implementation section
- Change capitalization of terms from terminology section (from WGLC)

Peter


On 4/11/24 14:59, internet-drafts@ietf.org wrote:
> Internet-Draft draft-ietf-dnsop-dnssec-bootstrapping-08.txt is now available.
> It is a work item of the Domain Name System Operations (DNSOP) WG of the IETF.
> 
>     Title:   Automatic DNSSEC Bootstrapping using Authenticated Signals from the Zone's Operator
>     Authors: Peter Thomassen
>              Nils Wisiol
>     Name:    draft-ietf-dnsop-dnssec-bootstrapping-08.txt
>     Pages:   17
>     Dates:   2024-04-11
> 
> Abstract:
> 
>     This document introduces an in-band method for DNS operators to
>     publish arbitrary information about the zones they are authoritative
>     for, in an authenticated fashion and on a per-zone basis.  The
>     mechanism allows managed DNS operators to securely announce DNSSEC
>     key parameters for zones under their management, including for zones
>     that are not currently securely delegated.
> 
>     Whenever DS records are absent for a zone's delegation, this signal
>     enables the parent's registry or registrar to cryptographically
>     validate the CDS/CDNSKEY records found at the child's apex.  The
>     parent can then provision DS records for the delegation without
>     resorting to out-of-band validation or weaker types of cross-checks
>     such as "Accept after Delay".
> 
>     This document deprecates the DS enrollment methods described in
>     Section 3 of RFC 8078 in favor of Section 4 of this document, and
>     also updates RFC 7344.
> 
>     [ Ed note: This document is being collaborated on at
>     https://github.com/desec-io/draft-ietf-dnsop-dnssec-bootstrapping/
>     (https://github.com/desec-io/draft-ietf-dnsop-dnssec-bootstrapping/).
>     The authors gratefully accept pull requests. ]
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-bootstrapping/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-dnsop-dnssec-bootstrapping-08.html
> 
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-dnssec-bootstrapping-08
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop

-- 
Like our community service? đź’›
Please consider donating at

https://desec.io/

deSEC e.V.
Kyffhäuserstr. 5
10781 Berlin
Germany

Vorstandsvorsitz: Nils Wisiol
Registergericht: AG Berlin (Charlottenburg) VR 37525

v2.23.0 | Report a Bug | By Email