[Opendnssec-develop] OpenDNSSEC Project Management
Roy Arends
roy at nominet.org.uk
Tue Jan 13 14:40:29 UTC 2009
OpenDNSSECers,
When I took the lead to manage this project, I had the assumption that
most of the architecture design was done, and what needed to follow was a
simple implementation of the parts. My view was that this would be done in
two phases. The first phase was a simple proof of concept, with mostly
existing tools. The second phase is a production version.
The proof of concept is simply a nameserver running as slave for the
incoming unsigned zone, and as a master for the outgoing signed zone. The
magic that causes the flip from unsigned to signed would be a regular
running script that consults a database for the proper crypto-related
data.
I stand corrected.
The necessity for IXFR, and the complexity that comes with it, renders the
proof of concept completely useless for the production version. This
became clear during the discussions at NLNetLabs last month.
To be clear: I still want the proof of concept (PoC) version, albeit
without IXFR.
However, due to a busy agenda, and the unforeseen amount of work for this
project, I'm handing projectmanagement over to Rickard Bondesson.
Thanks guys,
Roy
More information about the Opendnssec-develop
mailing list