Subject: [DNSSEC-Bootstrapping] Status

From: Peter Thomassen <[email-masked]>
Date: Tue, 19 Oct 2021 14:48:03 +0200

Folks,

I quickly wanted to check in with you what the status is on DNSSEC Bootstrapping.

1.) Draft
---------
My impression is that the draft is in quite mature shape, and we've converged on most questions. Of the remaining issues, only one affects the protocol format (everything else is about defining operational practice, such as when to trigger a bootstrapping scan). I'll send a separate message about the protocol format issue.

We have requested slots to present at ICANN 72 and IETF 112, and are planning to ask the DNSOP WG for adoption around that time.

Link: https://datatracker.ietf.org/doc/draft-thomassen-dnsop-dnssec-bootstrapping/

2.) Implementation status
-------------------------
deSEC is running bootstrapping zones at _boot.ns1.desec.io and _boot.ns2.desec.org, which contain bootstrapping signaling records for about 14,000 domains. (This is currently not automatically synced when a new domain is created at deSEC. If you need a new domain to show up, please send me a note.)

Regarding other DNS operators, registrars and registries on this list: Would you like to share what your current plans are?

Thanks,
Peter

-- 
Like our community service? 💛
Please consider donating at

https://desec.io/

deSEC e.V.
Kyffhäuserstr. 5
10781 Berlin
Germany

Vorstandsvorsitz: Nils Wisiol
Registergericht: AG Berlin (Charlottenburg) VR 37525