[DNSOP] Protocol Action: 'Operational Recommendations for DNSSEC Delegation Signer (DS) Automation' to Best Current Practice (draft-ietf-dnsop-ds-automation-09.txt)
The IESG <iesg-secretary@ietf.org> Fri, 22 May 2026 18:52 UTC
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: dnsop@ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from [10.244.11.174] (unknown [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id 17C8FF365FE7; Fri, 22 May 2026 11:52:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1779475950; bh=X1c+zm/GVPP/x3diY2ge/kYkWmHQdviW9ynYst3LKnE=; h=From:To:Subject:Cc:Date; b=zQyuEx4Xa47FUoMHfAzHf9zC/V96ILC7OyaL+avW+B7/A64MnCJHgSChI2ydfG1VV JMutgH2JHNczO+dKSwS5kvLeRwu+YkShAqg813IWPXlhSh3Iylb+6nqCVIQPunqM2I UT/D6u/cyilwOF3lgVRiXByQ3AdMxSS7Wmo0cOy8=
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 12.65.2
Auto-Submitted: auto-generated
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <177947595002.81355.13851815330448433264@dt-datatracker-5b4c8598b5-4ztf9>
Date: Fri, 22 May 2026 11:52:30 -0700
Message-ID-Hash: MANDR6K4PN7WYHCG3JP6MREKSAEBSGCW
X-Message-ID-Hash: MANDR6K4PN7WYHCG3JP6MREKSAEBSGCW
X-MailFrom: iesg-secretary@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: The IESG <iesg@ietf.org>, dnsop-chairs@ietf.org, dnsop@ietf.org, draft-ietf-dnsop-ds-automation@ietf.org, mohamed.boucadair@orange.com, rfc-editor@rfc-editor.org
X-Mailman-Version: 3.3.9rc6
Subject: [DNSOP] Protocol Action: 'Operational Recommendations for DNSSEC Delegation Signer (DS) Automation' to Best Current Practice (draft-ietf-dnsop-ds-automation-09.txt)
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/CnP-m5hgd08IOaBeYiC1-0fWGnQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>
The IESG has approved the following document: - 'Operational Recommendations for DNSSEC Delegation Signer (DS) Automation' (draft-ietf-dnsop-ds-automation-09.txt) as Best Current Practice This document is the product of the Domain Name System Operations Working Group. The IESG contact persons are Mahesh Jethanandani and Mohamed Boucadair. A URL of this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-dnsop-ds-automation/ Technical Summary Enabling support for automatic acceptance of DNSSEC Delegation Signer (DS) parameters from the Child DNS operator (via RFCs 7344, 8078, 9615) requires the parental agent, often a registry or registrar, to make a number of technical decisions around acceptance checks, error and sucess reporting, and multi-party issues such as concurrent updates. This document describes recommendations about how these points are best addressed in practice. Working Group Summary The DNS operations working group has a very broad membership, with varying interests in different topics. The deliberations and consensus on this draft was largely driven by a smaller subset of individuals that are involved in the topic area in both IETF and relevant industry circles (ICANN, ccTLD world, etc.). This was largely to be expected, so this was not seen as an obstacle to achieving consensus. Document Quality This work has been socialized for wider input in a variety of fora (like ICANN CPH TechOps, APTLD 88, ROW 14, CENTR Tech 53, DNS OARC 45, and ICANN 84). As indicated in the wrietup, there are a reasonable number of organizations (ccTLDs mostly) that have developed many of the mechanisms in this document, with a few others in the pipeline. Personnel The Document Shepherd for this document is Shumon Huque. The Responsible Area Director is Mohamed Boucadair.