May 6 – 7, 2021
UTC timezone
OARC 35 Day 1 - begins 01:00 UTC Today 6 May.

Multi-Signer DNSSEC Automation

May 6, 2021, 6:05 AM
Standard Presentation Online Workshop OARC 35 Day 1


Ulrich Wisser (IIS)


RFC 8901 describes modes for operating a domain with multiple independent signers. We discuss how the setup and dissolve a multi-signer arrangement. We describe our current status for the draft, implementation and testbed. And we will describe future development and some specific problems with algorithm usage and validation.
As it turns out this is the exact same operation for changing name server operators without going insecure.

Primary authors

Mr Shumon Huque Ulrich Wisser (IIS)

Presentation materials