Re: [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-bootstrapping-00.txt

[Bob Harold <[e-mail]>]

On Fri, Apr 22, 2022 at 12:30 AM <[e-mail]> wrote:

>
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
> This draft is a work item of the Domain Name System Operations WG of the
> IETF.
>
>         Title           : Automatic DNSSEC Bootstrapping using
> Authenticated Signals from the Zone's Operator
>         Authors         : Peter Thomassen
>                           Nils Wisiol
>         Filename        : draft-ietf-dnsop-dnssec-bootstrapping-00.txt
>         Pages           : 14
>         Date            : 2022-04-21
>
> Abstract:
>    This document introduces an in-band method for DNS operators to
>    publish arbitrary information about the zones they are authoritative
>    for, in an authenticated fashion and on a per-zone basis.  The
>    mechanism allows managed DNS operators to securely announce DNSSEC
>    key parameters for zones under their management, including for zones
>    that are not currently securely delegated.
>
>    Whenever DS records are absent for a zone's delegation, this signal
>    enables the parent's registry or registrar to cryptographically
>    validate the CDS/CDNSKEY records found at the child's apex.  The
>    parent can then provision DS records for the delegation without
>    resorting to out-of-band validation or weaker types of cross-checks
>    such as "Accept after Delay" ([RFC8078]).
>
>    This document updates [RFC8078] and replaces its Section 3 with
>    Section 3.2 of this document.
>
>    [ Ed note: Text inside square brackets ([]) is additional background
>    information, answers to frequently asked questions, general musings,
>    etc.  They will be removed before publication.  This document is
>    being collaborated on at https://github.com/desec-io/draft-thomassen-
>    dnsop-dnssec-bootstrapping/ (https://github.com/desec-io/draft-
>    thomassen-dnsop-dnssec-bootstrapping/).  The authors gratefully
>    accept pull requests. ]
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-bootstrapping/
>
> There is also an HTML version available at:
>
> https://www.ietf.org/archive/id/draft-ietf-dnsop-dnssec-bootstrapping-00.html
>
>
Interesting idea.

Minor edit:

In "1. Introduction", third paragraph, first sentence:
" these dependencies result often result "
the first "result" should be removed.

-- 
Bob Harold