[DNSOP] Fw: New Version Notification for draft-mglt-dnsop-dnssec-validator-requirements-09.txt

Daniel Migault <daniel.migault@ericsson.com> Thu, 30 April 2020 15:50 UTC

Return-Path: <daniel.migault@ericsson.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42D4C3A0B74 for <dnsop@ietfa.amsl.com>; Thu, 30 Apr 2020 08:50:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.92
X-Spam-Level:
X-Spam-Status: No, score=-2.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.82, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HjgUZUOZJO_f for <dnsop@ietfa.amsl.com>; Thu, 30 Apr 2020 08:50:40 -0700 (PDT)
Received: from NAM04-CO1-obe.outbound.protection.outlook.com (mail-eopbgr690057.outbound.protection.outlook.com [40.107.69.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A235C3A0D7D for <dnsop@ietf.org>; Thu, 30 Apr 2020 08:48:56 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SFg4Leh3W64ZZOt/gJrNp9Y4uXQkEkfijk0vLsboAdUHpoSFWkuuUnHsrDs50DzFflQnoTehFnWp7V+o26rO5xjQi10kXic/QHwVrPncdmvK6ypk3iUXQAmTuUYF/PY6OYOrf3BOujBS1WoP56S25YSH4+clHPHJGufI8Bor4UaixyWr/jgpyFhJXMdxuD2Fk6v9QLP0RIR9Y3VEk5jIfL5f6lCm6V9Z8oSpNCM66J3W/8vKeYhGqnK40dZPIc9PUcBl+z6LNVQ5fP1n+F/JxchXn6l4U5Mxl5QzwWcbsee3RIyBwOrYTyfeJKLpAVBgZw+XBsJnsroHAUz6jmLCWA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ps3FpX9WSaZHTSqKa8yGOwLOzLoUAf4bjHj4LZxcSeY=; b=Nr8TTS+4TVXtF/q+o28IaE0m7II6yEOQQSikQ18wE+8zb00xddVMVyHo4fonSLkFgJhPOnCq1PmRpOErh+/nu2Holzj5XlrIdlzPJvzlPpDC8H6PlCgXtM/WsTTS9oeTngImxilUW8NcoG/UEOEZD74/WmGSfSCL0fy+/aO86nTSVy1Oi7UDaTxXRZkkA7rzPIUu2T0nZCskuEXr46EZmIRM5GCnGTfs9g1lb/AZfAOdnWpfIjgGF8D3+qGou7D4iYBoPMv0cpkmlhU5klHzmPOAMbWDz1rX7ha9hLmhSymD6UTr85ycYBNK0uuy9Y/tQlZKepPY73+PWLKoDCkQQA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ps3FpX9WSaZHTSqKa8yGOwLOzLoUAf4bjHj4LZxcSeY=; b=FEozjzncfYIlA6xYVEpVrZ4uhBYLKFxscBqyjzUaJjxEpoy8ynby8vFcBHRIuBWUuGuLoz4zwW4nMVkoF06DrbMTNRqYjTkhCacRfthLPgcc8ZHQlP5VlcxpuBB2lexPvGq5Bw+eF8iUaRy76cENN5xclWAMLht6EWuw0eWZ7jE=
Received: from SA0PR15MB3791.namprd15.prod.outlook.com (2603:10b6:806:8d::10) by SA0PR15MB4048.namprd15.prod.outlook.com (2603:10b6:806:83::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2958.20; Thu, 30 Apr 2020 15:48:55 +0000
Received: from SA0PR15MB3791.namprd15.prod.outlook.com ([fe80::d8e8:2ec6:b919:f687]) by SA0PR15MB3791.namprd15.prod.outlook.com ([fe80::d8e8:2ec6:b919:f687%5]) with mapi id 15.20.2958.020; Thu, 30 Apr 2020 15:48:54 +0000
From: Daniel Migault <daniel.migault@ericsson.com>
To: dnsop <dnsop@ietf.org>
Thread-Topic: New Version Notification for draft-mglt-dnsop-dnssec-validator-requirements-09.txt
Thread-Index: AQHWHnS/BU4e3N+b+0iJjuamwIcLU6iRzcXx
Date: Thu, 30 Apr 2020 15:48:54 +0000
Message-ID: <SA0PR15MB37913779A424A9F373ACA3E9E3AA0@SA0PR15MB3791.namprd15.prod.outlook.com>
References: <158819897356.17857.12217019751673350730@ietfa.amsl.com>
In-Reply-To: <158819897356.17857.12217019751673350730@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com;
x-originating-ip: [96.22.11.129]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a2ab7577-47c5-4c5e-3aa6-08d7ed1dfcf4
x-ms-traffictypediagnostic: SA0PR15MB4048:
x-microsoft-antispam-prvs: <SA0PR15MB40480D6E1F6E91B91D877121E3AA0@SA0PR15MB4048.namprd15.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0389EDA07F
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA0PR15MB3791.namprd15.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(366004)(346002)(396003)(39860400002)(376002)(71200400001)(66476007)(91956017)(5660300002)(66946007)(64756008)(66574012)(66446008)(86362001)(66556008)(6506007)(19627405001)(6916009)(76116006)(53546011)(7696005)(2906002)(186003)(26005)(478600001)(15650500001)(8936002)(55016002)(44832011)(316002)(8676002)(966005)(33656002)(9686003)(52536014); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_SA0PR15MB37913779A424A9F373ACA3E9E3AA0SA0PR15MB3791namp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a2ab7577-47c5-4c5e-3aa6-08d7ed1dfcf4
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Apr 2020 15:48:54.8907 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 6mJMcxU62tJstNPk+7aAm4iDLa1XTGs7wgWv5u1FgvWPVBucoSN16p8Y4v8aSvlgMfnV6ADB9vNGsx66PfBtuA673/EDv/ylkFo+9Fakz0I=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR15MB4048
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/uQUaRqthcNI7DU_HJBhHqzcPFN4>
Subject: [DNSOP] Fw: New Version Notification for draft-mglt-dnsop-dnssec-validator-requirements-09.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Apr 2020 15:50:46 -0000

Hi,

Please find a new version of "Recommendations for DNSSEC Resolvers Operators". We restructured the text according to the feed backs we received during the Singapore meeting. We especially clarified where the trust is for an operator when it relies on the software provider for the update of the TAs. We also had a specific section for the NTA.

I think this document will be useful for operators willing to deploy DNSSEC, which also benefits the authoritative counter parts. So I think it is important and welcome any comments!

Yours,
Daniel

________________________________________
From: internet-drafts@ietf.org <internet-drafts@ietf.org>
Sent: Wednesday, April 29, 2020 6:22 PM
To: Daniel Migault; Edward Lewis; Dan York
Subject: New Version Notification for draft-mglt-dnsop-dnssec-validator-requirements-09.txt

A new version of I-D, draft-mglt-dnsop-dnssec-validator-requirements-09.txt
has been successfully submitted by Daniel Migault and posted to the
IETF repository.

Name:           draft-mglt-dnsop-dnssec-validator-requirements
Revision:       09
Title:          Recommendations for DNSSEC Resolvers Operators
Document date:  2020-04-29
Group:          Individual Submission
Pages:          23
URL:            https://www.ietf.org/internet-drafts/draft-mglt-dnsop-dnssec-validator-requirements-09.txt
Status:         https://datatracker.ietf.org/doc/draft-mglt-dnsop-dnssec-validator-requirements/
Htmlized:       https://tools.ietf.org/html/draft-mglt-dnsop-dnssec-validator-requirements-09
Htmlized:       https://datatracker.ietf.org/doc/html/draft-mglt-dnsop-dnssec-validator-requirements
Diff:           https://www.ietf.org/rfcdiff?url2=draft-mglt-dnsop-dnssec-validator-requirements-09

Abstract:
   The DNS Security Extensions define a process for validating received
   data and assert them authentic and complete as opposed to forged.

   This document is focused clarifying the scope and responsibilities of
   DNSSEC Resolver Operators (DRO) as well as operational
   recommendations that DNSSEC validators operators SHOULD put in place
   in order to implement sufficient Trust that makes DNSSEC validation
   output accurate.  The recommendations described in this document
   include, provisioning mechanisms as well as monitoring and management
   mechanisms.




Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat