IETF68 DNSEXT

1
IETF68 DNSEXT

• Praha, Ceské Republiky, IETF 68
• Jabber xmppdnsext_at_jabber.ietf.org
• http//tools.ietf.org/wg/dnsext
• https//datatracker.ietf.org/public/meeting_materi
  als.cgi?meeting_num68

2
AGENDA

• Administrivia
• Appointment of Scribes
• Official
• Jabber
• Previous Minutes
• Agenda Bashing
• Document Status
• WG Documents
• DNAME
• DNS Hardening
• 2929bis update

• Open Mike
• DNSEXT future
• Other Groups?
• AOB
• DNSSEC Deployment roadmap

3
Documents Published

• RFC 4795 LLMNR

4
Documents Advance(I)

• NSID
• Name Server Identifier Option
• In IANA state
• Previously requested registry was never created
• Was waiting for server-id
• AD is finalizing the write-up
• DNSSEC experiments
• Publication Requested as Experimental
• DISCUSS state.
• Waiting for editor action

5
Documents Advance (II)

• OPT-IN
• Approved on its way to RFC editor
• Experiment is a normative ref
• Rollover requirements and Trustupdate timers
• RFC2929bis
• Experiment running more on that later
• NSEC3
• AD_EVALUATION

6
Last call completed waiting for chair

• DSA Keying and Signature Information in the DNS
• Storage of Diffie-Hellman Keying Information in
  the DNS
• Chair to forward this to the AD
• Transition Mechanisms
• draft-ietf-dnsext-dnssec-trans-04.txt
• Waiting for editors to submit version 05

7
Others

• Use of RSA/SHA-256 DNSKEY and RRSIG Resource
  Records in DNSSEC
• Killed (but still on the status page)
• Zombies
• AXFR clarify
• Olafur promises to dig into his mail archive
• rfc3597 (unknown RR advancement)
• Downref problem to be sorted out

8
WG Documents

• DNAME
• draft-ietf-dnsext-rfc2672bis-dname
• ECC-KEY
• draft-ietf-dnsext-ecc-key
• DNSSECbis updates
• draft-ietf-dnsext-dnssec-bis-updates
• Anti spoofing
• draft-ietf-dnsext-forgery-resilience

9
In the meantime

• We had an action to determine consensus for
  adapting DNSSEC SignOnly
• draft-stjohns-dnssec-sigonly
• There is no working group consensus to adapt this
  document.
• See message to the list this week.

10
AGENDA

• Administrivia
• Appointment of Scribes
• Official
• Jabber
• Previous Minutes
• Agenda Bashing
• Document Status
• WG Documents
• DNAME
• DNS Hardening
• DNSSECbis update
• 2929bis update

• Open Mike
• DNSEXT future
• Other Groups?
• AOB
• DNSSEC Deployment roadmap

11
OPEN MIKE on WG

• Most of the major items on the Charter have been
  completed
• Exception Moving docs up the standards track.
• Accomplishments
• 38 RFCs published
• 7 Docs _at_ IESG
• 2 zombies
• 2 ready to go
• 4 docs in the working group
• (53 in total)

Quantity is no indication for quality -)
12
Questions and positions

• New work only when the work is chartered by the
  stakeholder
• Or when requirements come our way
• The WG goes into hibernation
• The list will remain anyhow
• Do we need to re-charter ?
• Dont normal working group get killed when the
  work is done?

13
AOB

• DNSSEC-SEC Deployment