Multi-signer

The Multi-signer project is an open project with the goal of providing practical tools and guidelines for the implementation, automation, management and monitoring of a multi-signer model.

Multi-signer Project Goals:

• Create and demonstrate tools that automate addition and deletion of signers to a multi-signer model.
• Create monitoring tools to monitor the validity of the zones.
• Create a multi-signer Proof of Concept with multiple organizations.
• Document the use of such tools.

Please meet us at these events

https://github.com/DNSSEC-Provisioning/Multi-signer/blob/main/events.md

Mapping of multi-signer capabilities

• Capabilities of Name Server Software
• Capabilities of DNS Service Providers

Documents of interest

• DNSSEC automation: https://github.com/DNSSEC-Provisioning/draft-wisser-dnssec-automation.
• Multi-Signer DNSSEC Models: https://tools.ietf.org/html/rfc8901.
• Managing DS Records from the Parent via CDS/CDNSKEY: https://tools.ietf.org/html/rfc8078.
• Child-to-Parent Synchronization in DNS: https://tools.ietf.org/html/rfc7477.
• Support for CDS/CDNSKEY updates