This post
https://lists.opendnssec.org/pipermail/opendnssec-user/2016-September/003661.html
suggests DNSSEC automation using CDS/CDNSKEY publication is planned for ODS
"Automated DS management such as described in RFC 7344 is on our
roadmap of OpenDNSSEC 2.x (probably 2.2 or 2.3)."
In current ODS head, which builds as
Version 2.1.0-dev
there's still no mention of it, and @github, I don't yet see any other related
dev branch.
With Gandi (at least -- maybe others as well) having now deployed an
'experimental', available for testing, implementation of
https://datatracker.ietf.org/doc/draft-ietf-regext-dnsoperator-to-rrr-protocol/
and Bind, KnotDNS & PowerDNS all providing CDS / CDNSKEY record
publication/support (admittedly, untested yet against Gandi, in my case), it'd
be useful to start working with ODS in the mix as well.
Is there a relevant dev branch yet available?
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user