IAB comments on draft-weiler-dnssec-dlv-iana-00.txt

The IAB has just to the IETF sent comments during last call of the document draft-weiler-dnssec-dlv-iana-00. The conclusion at the end is as follows:

The IAB, obviously, favors expedient deployment of DNSSEC in the DNS root.

In absence of such we understand that mechanisms such as DLV or the publication of lists with TLD trust anchors could aid deployment. However, the IAB does not support the establishment of a domain under .arpa combined with a request from the IETF to IANA to establish such a service as that would implicitly be based on the MOU between RFC3172. However,

  • if there is IETF wide consensus on a proposal to establish a .arpa zone;
  • if such proposal would deal with the ‘competition’ issues mentioned above;
  • if such proposal should contain much more detail on how to establish and maintain authentic DLV entries;
  • and if said proposal describes the other requirements for such registry such as key management; then given such IETF consensus the IAB will explore how such registry can be established without violating the MOU.