Dear DNSOP,
This revision contains minor editorial updates from Patrick's Dnsdir review
(thanks!), and a new Implementation Status section.
Best,
Peter
On 4/9/25 17:47, internet-dra...@ietf.org wrote:
Internet-Draft draft-ietf-dnsop-cds-consistency-06.txt is now available. It is
a work item of the Domain Name System Operations (DNSOP) WG of the IETF.
Title: Clarifications on CDS/CDNSKEY and CSYNC Consistency
Author: Peter Thomassen
Name: draft-ietf-dnsop-cds-consistency-06.txt
Pages: 14
Dates: 2025-04-09
Abstract:
Maintenance of DNS delegations requires occasional changes of the DS
and NS record sets on the parent side of the delegation. For the
case of DS records, RFC 7344 provides automation by allowing the
child to publish CDS and/or CDNSKEY records holding the prospective
DS parameters which the parent can ingest. Similarly, RFC 7477
specifies CSYNC records to indicate a desired update of the
delegation's NS (and glue) records. Parent-side entities (e.g.
Registries, Registrars) can query these records from the child and,
after validation, use them to update the parent-side RRsets of the
delegation.
This document specifies that when performing such queries, parent-
side entities MUST ensure that updates triggered via CDS/CDNSKEY and
CSYNC records are consistent across the child's authoritative
nameservers, before taking any action based on these records.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-cds-consistency/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-dnsop-cds-consistency-06.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-cds-consistency-06
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
DNSOP mailing list -- dnsop@ietf.org
To unsubscribe send an email to dnsop-le...@ietf.org
_______________________________________________
DNSOP mailing list -- dnsop@ietf.org
To unsubscribe send an email to dnsop-le...@ietf.org
