On 06. 07. 26 20:41, [email protected] wrote:
Internet-Draft draft-ietf-dnsop-delext-08.txt is now available. It is a work
item of the Domain Name System Operations (DNSOP) WG of the IETF.
Title: DNS Protocol Modifications for Delegation Extensions
Authors: Roy Arends
Peter van Dijk
Petr Špaček
Name: draft-ietf-dnsop-delext-08.txt
Pages: 17
Dates: 2026-07-06
Abstract:
The Domain Name System (DNS) protocol permits Delegation Signer (DS)
records at delegation points. This document specifies modifications
to the DNS protocol to permit a range of Resource Record types at
delegation points. These modifications are designed to maintain
compatibility with existing DNS resolution mechanisms and provide a
secure method for processing these records at delegation points.
This document updates RFC 6895.
I don't know what's the exact policy for this.
Given this document standardizes new referral semantics for auths and
resolvers I guess it should Update RFC 1034/1035?
New rules for signing and validation probably warrant Updates:
4033/4034/4035 too.
I wonder if that's enough or if it should list RFC 5155 - it affects
opt-out rules, but in any case, the validation clarification in RFC 6840
section 4.1 is effectively also updated by introduction of the new
authoritative types on the parent side of zone cut.
If anyone has pointers to process documents about this, please follow
them and provide your opinions.
--
Petr Špaček
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]