DNSSEC Deployment Initiative: Roadmap Version 2.0

Suresh Krishnaswamy, SPARTA

suresh@tislabs.com

Steve Crocker, Shinkuro, Inc.

Steve@shinkuro.com

Version 2.0

• Initial version was released on Feb 2005

• Updated. Progress made and framework for going forward

• Will be posted on: www.dnssec-deployment.org

Roadmap

• Produced by U.S. Dept of Homeland Security contractors– NIST– SPARTA– Shinkuro, Inc.

• Open effort via DNSSEC-Deployment.org mailing list and conference calls

Noteworthy Changes

• Software Inventory– Framework for classifying Tools

• Updates the list of Issues and Gaps

• Communication and Outreach Program

• Recognizes the initiative on the part of some ccTLDs and other key players

Software Tools Inventory

• Organized based on administrator roles

• Lists currently available tools

• Highlights gaps

• Early version was presented to this group during the Minneapolis IETF-62 meeting

• Software Tools List will be kept current on the www.dnssec-deployment.org website

Issues and Gaps

• Tracks progress for older issues– Root Zone– Key Rollover and Distribution, Trust Anchor Issues– Zone Walking– Performance– Algorithm Rollover– Application Issues

• Three new issues added– Opt-out (different issue than zone enumeration)– Split Views (problems and workarounds)– Dynamic update (client-side support for dynamic updates)

Communications and Outreach Plan

• Working Group complements parallel ongoing activities (e.g., IETF)– Plenary discussion– Topical areas (Applications, etc.)

• Website – updated to include current information as it is discovered or reported to us as well as resources for general audiences:– Newsletter: Business, higher education, government– Four-minute animation using a simple case directed

toward end users

www.dnssec-deployment.org

• Want to able to make this a useful resource for the community– News Items– Calendar– Software Tools– Technical resources for different adopter

classes

• Comments welcome re Roadmap, DNSSEC Animation, Website