Skip to content

shuque/multi-provider-dnssec

Repository files navigation

Multi Signer DNSSEC models

IETF draft to describe multi signer DNSSEC models

Many enterprises today employ the service of multiple DNS providers to distribute their authoritative DNS service. Two providers is fairly typical and this allows the DNS service to survive a complete failure of any single provider. This document outlines some possible models of DNSSEC deployment in such an environment.

Rendered versions of the current document can be found at the following links: