Protocol Action: 'Legacy Resolver Compatibility for Delegation Signer' to Proposed Standard

The IESG <iesg-secretary@ietf.org> Mon, 25 August 2003 21:47 UTC

From: The IESG <iesg-secretary@ietf.org>
Subject: Protocol Action: 'Legacy Resolver Compatibility for Delegation Signer' to Proposed Standard
Date: Mon, 25 Aug 2003 17:47:02 -0400
Lines: 41
Sender: owner-namedroppers@ops.ietf.org
Mime-Version: 1.0
Cc: Internet Architecture Board <iab@iab.org>, RFC Editor <rfc-editor@rfc-editor.org>, namedroppers@ops.ietf.org
To: IETF-Announce:;
Precedence: bulk
Message-ID: <20140418071738.2560.93246.ARCHIVE@ietfa.amsl.com>

The IESG has approved the Internet-Draft 'Legacy Resolver Compatibility for 
Delegation Signer' <draft-ietf-dnsext-dnssec-2535typecode-change-04.txt> as 
a Proposed Standard. This document is the product of the DNS Extensions 
Working Group. 
The IESG contact persons are Thomas Narten and Margaret Wasserman.


Technical Summary
 
As the DNS Security (DNSSEC) specifications have evolved, the syntax
and semantics of the DNSSEC resource records (RRs) have changed. Many
deployed nameservers understand variants of these semantics.
Dangerous interactions can occur when a resolver that understands an
earlier version of these semantics queries an authoritative server
that understands the newer Delegation Signer RR semantics, including
at least one failure scenario that will cause an unsecured zone to be
unresolvable. This document changes the type codes and mnemonics of
the DNSSEC RRs (SIG, KEY, and NXT) for the newest version of these RRs
to avoid those interactions. Using new type codes ensures that older
and newer resolvers can easily distinguish which variant of these RRs
have been implemented and how they should be interpreted.
 
Working Group Summary
 
There was consensus in the WG for this option. Note that this document
is part of the overall DNSEXT plan of issuing individual updates to
the DNSSEC RFCs; when all the changes have been completed, a revised
version of 2535 will be issued tht incorportes all the changes.
 
Protocol Quality
 
This document has been reviewed for the IESG by Thomas Narten and Erik
Nordmark.



--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>

Protocol Action: 'Legacy Resolver Compatibility f… The IESG