[dns-operations] Root zone DNSSEC deployment web site and technical status update

[Kim Davies]

On 16/12/2009, at 4:38 AM, Rickard Dahlstrand wrote:

I would also like to know this and more details on how DS-records can be submitted.

The DS handling procedures are in the process of getting various sign-offs. I expect that will be soon. They are modelled on minor adaptations the current root zone change procedure by adding some extra fields for DS records, but otherwise the process for TLD managers is very much the same.

We have given a few presentations to TLD managers regarding our plans, for example: http://sel.icann.org/meetings/seoul2009/presentation-iana-27oct09-en.pdf. The most significant change (to my mind) in adapting the processing model used by ITAR to the root zone is the lack of scheduled lifetimes for anchors. There is an illustration on page 12 of the slides. Essentially, the ITAR has a model where each listing request contains a listing period which contains a start and end date, whereas the root zone model is that you send in two discrete requests, one to add and one to remove. Additionally, as there are multiple parties used in the root zone publication process, the variability in processing time hits the critical path to publishing changes, whereas with ITAR it typically would not.

Once we have certainty on the procedures, we can finalise the dates and of course share them, hopefully shortly.

kim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20091216/14005599/attachment.html>