Proposal for Signing the DNSSEC Root

Home / Blogs

Proposal for Signing the DNSSEC Root

	By Paul Hoffman
	November 13, 2008 Views: 11,197 Comments: 1

The U.S. National Telecommunications and Information Administration (NTIA) is soliciting comments on signing the DNSSEC root. Ignore the caption on the page: this is not about DNSSEC deployment, which is already happening just fine. It’s about who gets to sign the root zone.

A handful of us DNSSEC dweebs wrote a response that emphasizes the technical need to start signing sooner rather than later, and strongly supports signing by either of the parties who are already trusted to put information into the root—IANA or the root zone operators. My name is on the ‘From:’ line simply because I was the one to email it to the NTIA. I wrote the first draft of the document, but other signers did some serious editing before we turned it in.

We hope that this will help NTIA feel more at ease about moving forwards quickly without agonizing about all the different people who want to hold the keys.

By Paul Hoffman

Filed Under

Comments

DNSSEC Comments Brett Carr – Nov 17, 2008 11:37 AM

Congratulations on getting your comments published by the NTIA, I submitted mine about 4 weeks ago and despite two follow up e-mails they have still failed to publish them.

Brett

# 1 Reply | Link | Report Problems

The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

VINTON CERF
Co-designer of the TCP/IP Protocols & the Architecture of the Internet