One document matched: draft-weiler-dnssec-dlv-iana-00.txt

Network Working Group                                          S. Weiler
Internet-Draft                                              SPARTA, Inc.
Expires: January 2, 2008                                    July 1, 2007


            DNSSEC Lookaside Validation (DLV) IANA Registry
                  draft-weiler-dnssec-dlv-iana-00.txt

Status of this Memo

   By submitting this Internet-Draft, each author represents that any
   applicable patent or other IPR claims of which he or she is aware
   have been or will be disclosed, and any of which he or she becomes
   aware will be disclosed, in accordance with Section 6 of BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt.

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html.

   This Internet-Draft will expire on January 2, 2008.

Copyright Notice

   Copyright (C) The IETF Trust (2007).

Abstract

   DNSSEC Lookaside Validation (DLV) is a mechanism for publishing
   DNSSEC trust anchors outside of the DNS delegation chain.  This
   document asks IANA to create a DLV registry containing entries for
   TLDs as well as the reverse-tree delegations maintained by IANA.








Weiler                   Expires January 2, 2008                [Page 1]

Internet-Draft                  DLV IANA                       July 2007


Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . . . 3
   2.  IANA Considerations . . . . . . . . . . . . . . . . . . . . . . 3
   3.  Security Considerations . . . . . . . . . . . . . . . . . . . . 3
   4.  References  . . . . . . . . . . . . . . . . . . . . . . . . . . 4
     4.1.  Normative References  . . . . . . . . . . . . . . . . . . . 4
     4.2.  Informative References  . . . . . . . . . . . . . . . . . . 4
   Author's Address  . . . . . . . . . . . . . . . . . . . . . . . . . 4
   Intellectual Property and Copyright Statements  . . . . . . . . . . 5









































Weiler                   Expires January 2, 2008                [Page 2]

Internet-Draft                  DLV IANA                       July 2007


1.  Introduction

   This document assumes familiarity with DNSSEC Lookaside Validation
   (DLV) [I-D.weiler-dnssec-dlv] as well as the core DNSSEC
   specifications [RFC4033] [RFC4034] [RFC4035].

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in RFC 2119 [RFC2119].


2.  IANA Considerations

   IANA is asked to create a DLV registry at dlv.dnssec.arpa targeting
   the root and containing DLV records for those TLDs and reverse zones
   delegated directly by IANA that ask to have DLV records published for
   their own zones.

   IANA is instructed to use its own best practices for authenticating
   zone operators' requests to insert, modify, and delete DLV entries.

   This DLV registry MUST itself be signed with DNSSEC.

   To be clear, IANA is only being asked to publish DLV records for top
   level domains and reverse zones delegated directly from IANA, thereby
   taking advantage of the IANA's existing relationships with the these
   zone operations and established procedures for authenticating
   requests from these zone operators.


3.  Security Considerations

   General security considerations for DLV are discussed in
   [I-D.weiler-dnssec-dlv].

   A DLV registry is a signed zone, much like any other.  IANA is asked
   to use ordinary operating procedures for this signed zone, as
   described in [RFC4641].  In particular, it is suggested that IANA use
   2048-bit RSA keys for both the KSK and ZSKs in this zone and roll the
   KSK at least once per year for the first four years this registry is
   in operation.  (The ZSK will presumably be rolled somewhat more
   often.)  IANA is encouraged to generate several KSKs for this zone
   immediately and publish a hash of each of those keys, perhaps in the
   form of a DS record, at the time the registry goes into production
   service.


4.  References



Weiler                   Expires January 2, 2008                [Page 3]

Internet-Draft                  DLV IANA                       July 2007


4.1.  Normative References

   [I-D.weiler-dnssec-dlv]
              Weiler, S., "DNSSEC Lookaside Validation (DLV)",
              draft-weiler-dnssec-dlv-03 (work in progress), July 2007.

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119, March 1997.

4.2.  Informative References

   [RFC4033]  Arends, R., Austein, R., Larson, M., Massey, D., and S.
              Rose, "DNS Security Introduction and Requirements",
              RFC 4033, March 2005.

   [RFC4034]  Arends, R., Austein, R., Larson, M., Massey, D., and S.
              Rose, "Resource Records for the DNS Security Extensions",
              RFC 4034, March 2005.

   [RFC4035]  Arends, R., Austein, R., Larson, M., Massey, D., and S.
              Rose, "Protocol Modifications for the DNS Security
              Extensions", RFC 4035, March 2005.

   [RFC4641]  Kolkman, O. and R. Gieben, "DNSSEC Operational Practices",
              RFC 4641, September 2006.


Author's Address

   Samuel Weiler
   SPARTA, Inc.
   7110 Samuel Morse Drive
   Columbia, Maryland  21046
   US

   Email: weiler@tislabs.com















Weiler                   Expires January 2, 2008                [Page 4]

Internet-Draft                  DLV IANA                       July 2007


Full Copyright Statement

   Copyright (C) The IETF Trust (2007).

   This document is subject to the rights, licenses and restrictions
   contained in BCP 78, and except as set forth therein, the authors
   retain all their rights.

   This document and the information contained herein are provided on an
   "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
   OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND
   THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS
   OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF
   THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
   WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.


Intellectual Property

   The IETF takes no position regarding the validity or scope of any
   Intellectual Property Rights or other rights that might be claimed to
   pertain to the implementation or use of the technology described in
   this document or the extent to which any license under such rights
   might or might not be available; nor does it represent that it has
   made any independent effort to identify any such rights.  Information
   on the procedures with respect to rights in RFC documents can be
   found in BCP 78 and BCP 79.

   Copies of IPR disclosures made to the IETF Secretariat and any
   assurances of licenses to be made available, or the result of an
   attempt made to obtain a general license or permission for the use of
   such proprietary rights by implementers or users of this
   specification can be obtained from the IETF on-line IPR repository at
   http://www.ietf.org/ipr.

   The IETF invites any interested party to bring to its attention any
   copyrights, patents or patent applications, or other proprietary
   rights that may cover technology that may be required to implement
   this standard.  Please address the information to the IETF at
   ietf-ipr@ietf.org.


Acknowledgment

   Funding for the RFC Editor function is provided by the IETF
   Administrative Support Activity (IASA).





Weiler                   Expires January 2, 2008                [Page 5]