Internet-Draft draft-ietf-dnsop-cds-consistency-09.txt is now available. It is a work item of the Domain Name System Operations (DNSOP) WG of the IETF.
Title: Clarifications on CDS/CDNSKEY and CSYNC Consistency Author: Peter Thomassen Name: draft-ietf-dnsop-cds-consistency-09.txt Pages: 15 Dates: 2025-10-15 Abstract: Maintenance of DNS delegations requires occasional changes of the DS and NS record sets on the parent side of the delegation. For the case of DS records, "Automating DNSSEC Delegation Trust Maintenance" (RFC 7344) provides automation by allowing the child to publish CDS and/or CDNSKEY records holding the prospective DS parameters which the parent can ingest. Similarly, "Child-to-Parent Synchronization in DNS" (RFC 7477) specifies CSYNC records to indicate a desired update of the delegation's NS (and glue) records. Parent-side entities (e.g., Registries and Registrars) can query these records from the child and, after validation, use them to update the parent- side Resource Record Sets (RRsets) of the delegation. This document specifies that when performing such queries, parent- side entities has to ensure that updates triggered via CDS/CDNSKEY and CSYNC records are consistent across the child's authoritative nameservers, before taking any action based on these records. This document updates RFC 7344 and RFC 7477. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-dnsop-cds-consistency/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-dnsop-cds-consistency-09.html A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-ietf-dnsop-cds-consistency-09 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
