[Opendnssec-develop] OpenDNSSEC Project Management

Roy Arends roy at nominet.org.uk
Tue Jan 13 14:40:29 UTC 2009


OpenDNSSECers,

When I took the lead to manage this project, I had the assumption that 
most of the architecture design was done, and what needed to follow was a 
simple implementation of the parts. My view was that this would be done in 
two phases. The first phase was a simple proof of concept, with mostly 
existing tools. The second phase is a production version.
 
The proof of concept is simply a nameserver running as slave for the 
incoming unsigned zone, and as a master for the outgoing signed zone. The 
magic that causes the flip from unsigned to signed would be a regular 
running script that consults a database for the proper crypto-related 
data.

I stand corrected.

The necessity for IXFR, and the complexity that comes with it, renders the 
proof of concept completely useless for the production version. This 
became clear during the discussions at NLNetLabs last month.

To be clear: I still want the proof of concept (PoC) version, albeit 
without IXFR.

However, due to a busy agenda, and the unforeseen amount of work for this 
project, I'm handing projectmanagement over to Rickard Bondesson. 

Thanks guys,

Roy



More information about the Opendnssec-develop mailing list