DNSSEC Key Repository Task Force

Introduction

Following discussions at RIPE 54 in Tallinn, the DNS Working Group agreed to form a Task Force to discuss issues around finding a global DNSSEC trust anchor.

Charter

The DNSSEC Key Repository Task Force was set up on request of the RIPE DNS Working Group to explore the field of running a "TLD only" DNSSEC trust anchor repository at the RIPE NCC.

This includes requirements and options for both acquiring the keys from the TLD registries as well as means of publication. The Task Force shall provide for a road map including a timeline for deploying such a repository.

Whether or not it would be better to sign the DNS root zone first is out of scope for the Task Force. This is for the community to decide after the Task Force has delivered its output. A draft version of this is due at RIPE55.

Time Line

• RIPE 54
  • Establishment of Task Force
  • Agree wording of initial approach to ICANN to make good on earlier earlier commitments towards signing the root zones
    
    
• RIPE 55 (and future RIPE Meetings, as appropriate)
  • Draft report

Data Protection Task Force Mailing List

You can contact the Task Force by sending an e-mail to dnssec-key-tf@ripe.net

Contacts

Jim Reid is the chair/contact person for this Task Force.

The volunteers serving on the Task Force are:

• Sam Weiler
• Roy Arends
• Joao Damas
• Daniel Karrenberg
• Peter Koch
• Jim Reid
• Marcos Sanz
• Mats Dufberg