Hi DNSOP, We've updated draft-pro-adp-agent-discovery to -01. The major changes from -00:
1. SVCB-first DNS discovery (RFC 9460), delegating the DNS layer to DNS-AID (draft-mozleywilliams-dnsop-dnsaid) for SvcParamKey registration (bap, cap, cap-sha256, well-known). 2. TLSA + DNSSEC for DANE-based TLS endpoint authentication (RFC 6698). 3. Four-level trust escalation model: dns-verified → dane-verified → key-verified → peer-verified. 4. The original TXT+SRV scheme from -00 is retained as a documented fallback for backward compatibility. 5. IANA registered "ai-adp" as the service name in the Service Name and Transport Protocol Port Number Registry on 2026-06-12. The SVCB-first approach aligns ADP's DNS layer with the ongoing work in dnsop. We'd appreciate any feedback on the SVCB parameter usage, the ALPN negotiation strategy, and the trust escalation model. I-D: https://datatracker.ietf.org/doc/draft-pro-adp-agent-discovery/ Repo: https://github.com/harrylian8766/adp-protocol Thanks, Harry
_______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
