[DNSOP] I-D Action: draft-ietf-dnsop-dns-zone-digest-12.txt

internet-drafts@ietf.org Tue, 29 September 2020 16:19 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Cc: dnsop@ietf.org
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: dnsop@ietf.org
Message-ID: <160139639151.5506.6236622349599229329@ietfa.amsl.com>
Date: Tue, 29 Sep 2020 09:19:51 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/Zv7OqchMBLQYv46o-P_RTGPgIKE>
Subject: [DNSOP] I-D Action: draft-ietf-dnsop-dns-zone-digest-12.txt

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Domain Name System Operations WG of the IETF.

        Title           : Message Digest for DNS Zones
        Authors         : Duane Wessels
                          Piet Barber
                          Matt Weinberg
                          Warren Kumari
                          Wes Hardaker
	Filename        : draft-ietf-dnsop-dns-zone-digest-12.txt
	Pages           : 37
	Date            : 2020-09-29

Abstract:
   This document describes a protocol and new DNS Resource Record that
   provides a cryptographic message digest over DNS zone data.  The
   ZONEMD Resource Record conveys the digest data in the zone itself.
   When a zone publisher includes a ZONEMD record, recipients can verify
   the zone contents for accuracy and completeness.  This provides
   assurance that received zone data matches published data, regardless
   of how the zone data has been transmitted and received.

   ZONEMD does not replace DNSSEC.  Whereas DNSSEC protects individual
   RRSets (DNS data with fine granularity), ZONEMD protects a zone's
   data as a whole, whether consumed by authoritative name servers,
   recursive name servers, or any other applications.

   As specified herein, ZONEMD is impractical for large, dynamic zones
   due to the time and resources required for digest calculation.
   However, The ZONEMD record is extensible so that new digest schemes
   may be added in the future to support large, dynamic zones.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-dns-zone-digest/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-dnsop-dns-zone-digest-12
https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-dns-zone-digest-12

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-dnsop-dns-zone-digest-12


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

[DNSOP] I-D Action: draft-ietf-dnsop-dns-zone-dig… internet-drafts