DNSSEC Delegation Signer (DS) Record Automation (R1)

Date IssuedDocumentReference IDCurrent Phase

  

DNSSEC Delegation Signer (DS) Record Automation (R1)SAC126

Phase 2 | Understand



  1. Phase 1 Receive
  2. Phase 2 Understand
  3. Phase 3 Evaluate
  4. Phase 4 Implement
  5. Phase 5 Close
  6. Closed



Description:

If a registry or a registrar wishes to implement DS automation for third-party DNSSEC operations, the current recommended interoperable mechanism is CDS/CDNSKEY (RFCs 7344, 9615). This mechanism has limitations as described in this document but has been deployed and there is operational experience in using it.


STATUS UPDATES

DatePhaseTypeStatus Updates

 

Phase 2Phase UpdateICANN received SAC126, acknowledged, and is currently reviewing.

 

Phase 2Phase ChangeNow Phase 2: Understand

 

Phase 1Phase UpdateICANN acknowledged receipt of Advice.

 

Phase 1Phase ChangeNow in Phase 1: Acknowledge

  

Phase 1Phase Update

SSAC published SAC126: DNSSEC Delegation Signer (DS) Record Automation: https://itp.cdn.icann.org/en/files/security-and-stability-advisory-committee-ssac-reports/sac-126-16-08-2024-en.pdf