<div dir="ltr"><div class="gmail_default" style="font-family:arial,sans-serif">Perhaps not "IANA official" - but I always consult (and contribute to):</div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif"><a href="https://github.com/oskar456/cds-updates">https://github.com/oskar456/cds-updates</a><br></div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Fri, Jan 30, 2026 at 9:04 AM Jeroen Massar via dns-operations <<a href="mailto:dns-operations@dns-oarc.net">dns-operations@dns-oarc.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><br><br><br>---------- Forwarded message ----------<br>From: Jeroen Massar <<a href="mailto:jeroen@massar.ch" target="_blank">jeroen@massar.ch</a>><br>To: DNS Operations <<a href="mailto:dns-operations@dns-oarc.net" target="_blank">dns-operations@dns-oarc.net</a>><br>Cc: <br>Bcc: <br>Date: Fri, 30 Jan 2026 14:58:17 +0100<br>Subject: List / Wiki of TLDs supporting CDS / CDNSKEY for DNSSEC DS updates<br>Hi,<br>
<br>
I am aware of the following TLDs handling DNSSEC key registrations/rotations with CDS/CDNSKEY<br>
<br>
.ch + .li -- <a href="https://www.nic.ch/security/cds/index.html" rel="noreferrer" target="_blank">https://www.nic.ch/security/cds/index.html</a><br>
.cz / .cr -- FOSDEM[1]<br>
.sk       -- <a href="https://sk-nic.sk/wp-content/uploads/documents/DNSSEC_CDS_EN.pdf" rel="noreferrer" target="_blank">https://sk-nic.sk/wp-content/uploads/documents/DNSSEC_CDS_EN.pdf</a><br>
 .arpa     -- RIPE: <a href="https://www.ripe.net/manage-ips-and-asns/db/support/configuring-reverse-dns#4--automated-update-of-dnssec-delegations" rel="noreferrer" target="_blank">https://www.ripe.net/manage-ips-and-asns/db/support/configuring-reverse-dns#4--automated-update-of-dnssec-delegations</a><br>
<br>
Are there any others? Is there an (authoritive) list?<br>
<br>
Could we have a list with the columns: TLD, method[webif/manual/CDS] ? :)<br>
<br>
Regards,<br>
 Jeroen<br>
<br>
[1]  <a href="https://archive.fosdem.org/2019/schedule/event/dns_dnssec_security_without_maintenance/attachments/slides/3141/export/events/attachments/dns_dnssec_security_without_maintenance/slides/3141/DNSSEC_20190203_PS_FOSDEM_automated_key_management.pdf" rel="noreferrer" target="_blank">https://archive.fosdem.org/2019/schedule/event/dns_dnssec_security_without_maintenance/attachments/slides/3141/export/events/attachments/dns_dnssec_security_without_maintenance/slides/3141/DNSSEC_20190203_PS_FOSDEM_automated_key_management.pdf</a><br>
<br>
<br>
<br><br><br>---------- Forwarded message ----------<br>From: Jeroen Massar via dns-operations <<a href="mailto:dns-operations@dns-oarc.net" target="_blank">dns-operations@dns-oarc.net</a>><br>To: DNS Operations <<a href="mailto:dns-operations@dns-oarc.net" target="_blank">dns-operations@dns-oarc.net</a>><br>Cc: <br>Bcc: <br>Date: Fri, 30 Jan 2026 14:58:17 +0100<br>Subject: [dns-operations] List / Wiki of TLDs supporting CDS / CDNSKEY for DNSSEC DS updates<br>_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
</blockquote></div>