Name: draft-ietf-dnsext-trustupdate-timers-00
Title: Automated Updates of DNSSEC Trust Anchors
State: Active
Authors: Michael StJohns
Group: DNS Extensions (dnsext)
Date: 2004-10-27
This document describes a means for automated, authenticated and authorized
updating of DNSSEC "trust anchors". The method provides protection against
single key compromise of a key in the trust point key set. Based on the
trust established by the presence of a current anchor, other anchors may be
added at the same place in the hierarchy, and, ultimately, supplant the
existing anchor.
|
|
|