[DNSOP] I-D Action: draft-ietf-dnsop-dnssec-automation-04.txt
internet-drafts@ietf.org Sat, 13 June 2026 01:47 UTC
Return-Path: <internet-drafts@ietf.org>
X-Original-To: dnsop@ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from [10.244.21.151] (unknown [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id DAC5B1008B101; Fri, 12 Jun 2026 18:47:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1781315270; bh=PCjWLudmF6Q1xfzK1+N0i1zEijU+uA3f5lC+mze+Ja8=; h=From:To:Cc:Subject:Reply-To:Date; b=x/vrOQT2adrZw+xIs9+WMLQE2D8jA309o7vue3wQEfO9sCpS5f9VhvVNuw+HSYj2Z pBmIazG8JSb9XkJ12wnifq7UqN8dzwhPD1YanV4e8pqAnVPwbEWnswQKTuTheWFNUy uSXui+8Wm94rtgPbLJ8gSweQSrQyBaE1ah6rZ5As=
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 12.67.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <178131527080.127199.298880553616405726@dt-datatracker-f9b87776f-8pmmg>
Date: Fri, 12 Jun 2026 18:47:50 -0700
Message-ID-Hash: IQOBUOGBJ7F3RQHJF6U2IPY2IGX4PEWV
X-Message-ID-Hash: IQOBUOGBJ7F3RQHJF6U2IPY2IGX4PEWV
X-MailFrom: internet-drafts@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: dnsop@ietf.org
X-Mailman-Version: 3.3.9rc6
Reply-To: dnsop@ietf.org
Subject: [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-automation-04.txt
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/cGfj-j3a7H-CEeRnbObbH7vldyo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>
Internet-Draft draft-ietf-dnsop-dnssec-automation-04.txt is now available. It
is a work item of the Domain Name System Operations (DNSOP) WG of the IETF.
Title: DNSSEC automation
Authors: Ulrich Wisser
Shumon Huque
Johan Stenstam
Name: draft-ietf-dnsop-dnssec-automation-04.txt
Pages: 13
Dates: 2026-06-12
Abstract:
This document describes an algorithm and protocol to automate the
setup, operations, and decommissioning of Multi-Signer DNSSEC
[RFC8901] configurations. To accomplish this, it employs Model 2 of
the multi-signer specification (where each operator has their own
distinct KSK and ZSK sets, or CSK sets), management of DS records
from the parent via CDS/CDNSKEY [RFC8078], and Child-to-Parent
Synchronization in DNS [RFC7477].
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-automation/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-dnsop-dnssec-automation-04.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-dnssec-automation-04
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
- [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-autom… internet-drafts