SAC126 was published on 16 August 2024. All SSAC publications can be found at https://www.icann.org/en/ssac/publications.


Recommendation DescriptionCurrent Phase
Recommendation 1If a registry or a registrar wishes to implement DS automation for third-party DNSSEC operations, the current recommended interoperable mechanism is CDS/CDNSKEY (RFCs 7344, 9615). This mechanism has limitations as described in this document but has been deployed and there is operational experience in using it.

Phase 2 | Understand

Recommendation 2ICANN Org should support registries and registrars who want to implement DS automation using the mechanisms from Recommendation 1, such as by facilitating a Fast-Track RSEP.

Phase 2 | Understand

Recommendation 3ICANN org should facilitate the development of operational guidance for registries and registrars around the implementation of DS automation, in particular the operational aspects outlined in section 4.4.

Phase 2 | Understand



Supporting Documents

DateDocument NameDocument

 TBD

Preliminary Assessment