New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Implement draft-berra-dnsop-keystate #81

Open

berrabou opened this issue Oct 23, 2024 · 1 comment

Assignees

Collaborator

berrabou commented Oct 23, 2024

Implement Signalling Key State Via DNS EDNS(0) OPT as described here: https://www.ietf.org/archive/id/draft-berra-dnsop-keystate-00.txt

berrabou self-assigned this

Owner

johanix commented Oct 24, 2024

If option delegation-sync-parent then check for and, if needed, generate a SIG(0) key pair for the updater identity (the DSYNC target name). Publish the public key.
If option delegation-sync-child then try to lookup the UPDATE Receiver SIG(0) key and initiate the same type of bootstrap logic as the parent does for the child. When UPDATE Receiver key becomes trusted store it in the TrustStore.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment