Last Call: <draft-ietf-dnsop-dns-zone-digest-09.txt> (Message Digest for DNS Zones) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Mon, 31 August 2020 16:05 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-dnsop-dns-zone-digest-09.txt> (Message Digest for DNS Zones) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
CC: barryleiba@gmail.com, dnsop@ietf.org, tjw.ietf@gmail.com, Tim Wicinski <tjw.ietf@gmail.com>, draft-ietf-dnsop-dns-zone-digest@ietf.org, dnsop-chairs@ietf.org
Reply-To: last-call@ietf.org
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <159888994126.9753.15824019164711415199@ietfa.amsl.com>
Date: Mon, 31 Aug 2020 09:05:41 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/kaAGihK06Pq0ICqMWyVeMgp4IlE>

The IESG has received a request from the Domain Name System Operations WG
(dnsop) to consider the following document: - 'Message Digest for DNS Zones'
  <draft-ietf-dnsop-dns-zone-digest-09.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2020-09-14. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract


   This document describes a protocol and new DNS Resource Record that
   can be used to provide a cryptographic message digest over DNS zone
   data.  The ZONEMD Resource Record conveys the digest data in the zone
   itself.  When a zone publisher includes an ZONEMD record, recipients
   can verify the zone contents for accuracy and completeness.  This
   provides assurance that received zone data matches published data,
   regardless of how the zone data has been transmitted and received.

   ZONEMD is not designed to replace DNSSEC.  Whereas DNSSEC protects
   individual RRSets (DNS data with fine granularity), ZONEMD protects a
   zone's data as a whole, whether consumed by authoritative name
   servers, recursive name servers, or any other applications.

   As specified at this time, ZONEMD is not designed for use in large,
   dynamic zones due to the time and resources required for digest
   calculation.  The ZONEMD record described in this document is
   designed so that new digest schemes may be developed in the future to
   support large, dynamic zones.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-dnsop-dns-zone-digest/



No IPR declarations have been submitted directly on this I-D.

Last Call: <draft-ietf-dnsop-dns-zone-digest-09.t… The IESG