-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
I have posted a -07 version of draft-ietf-dnsop-rfc4641bis that incorporates the comments received during the WGLC. The changelog can be viewed in section D.8. The rfcdiff: http://tools.ietf.org/rfcdiff?url2=http://tools.ietf.org/id/draft-ietf-dnsop-rfc4641bis-07.txt Most important changes are: - - Some more clarifying text in 4.1.4. Rollover for a Single Type Signing Key rollover. - - Some more clarifyint text in 4.3.5.1. Cooperating DNS operators. - - Editorial changes in the Rollover Figures. I would like to ask the reviewers to take a look at the rfcdiff and tell if they could live with these changes. In other words, do you think the changes are in line with the outcome of the discussion on the mailing list? Thanks, Matthijs On 07/11/2011 02:07 PM, [email protected] wrote: > A New Internet-Draft is available from the on-line Internet-Drafts > directories. This draft is a work item of the Domain Name System Operations > Working Group of the IETF. > > Title : DNSSEC Operational Practices, Version 2 > Author(s) : Olaf M. Kolkman > Filename : draft-ietf-dnsop-rfc4641bis-07.txt > Pages : 67 > Date : 2011-07-11 > > This document describes a set of practices for operating the DNS with > security extensions (DNSSEC). The target audience is zone > administrators deploying DNSSEC. > > The document discusses operational aspects of using keys and > signatures in the DNS. It discusses issues of key generation, key > storage, signature generation, key rollover, and related policies. > > This document obsoletes RFC 4641 as it covers more operational ground > and gives more up-to-date requirements with respect to key sizes and > the DNSSEC operations. > > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-ietf-dnsop-rfc4641bis-07.txt > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > This Internet-Draft can be retrieved at: > ftp://ftp.ietf.org/internet-drafts/draft-ietf-dnsop-rfc4641bis-07.txt > _______________________________________________ > DNSOP mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/dnsop -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJOGumhAAoJEA8yVCPsQCW5g6sIAKJxzZlOOGTi9d3XmdCriTUg sHwUgyf6crPfV6k4uXE0ZtUjh2uPI8tj3OoJLI25S5UxTrt2MirEZappRCDExsf4 f/WM713/Zq6fCU3WFGTaODWLFSWNik45Pn5WYX5vvw2CbU0KRfH2W1M51/tBf7Wr RpiaCJGxA9P/Zw1H2wWmLDbPTmvAq8og/hkRAqR08/kAOt+W/sd0tR/3E9SVxK6y HlPHM3g7cQihexQuWdXdrfM1soVN/kWCBHra1TjTj9HN1AyaNTgiI3t6nxSg/dwg oNv1UJK7+77QXME7t5uDb9BljYFi3JAT5KHoCYhuaj7jI5d0/AV5l6aQjtmFh6c= =T58u -----END PGP SIGNATURE----- _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
