<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>I have been working on an RFC 7344 implementation, except for a few weeks gallivanting around Scandinavia. It's called dnssec-cds and you can find the current state of it here:</div><div><br></div><div><a href="https://git.csx.cam.ac.uk/x/ucs/ipreg/bind9.git/tree/u/fanf2/patch:/bin/dnssec">https://git.csx.cam.ac.uk/x/ucs/ipreg/bind9.git/tree/u/fanf2/patch:/bin/dnssec</a><br><br>General strategy is that one invocation updates one dsset file, so it works with dnssec-signzone. We don't use dnssec-signzone but our DNS rebuild batch job has a pile of dsset files as part of its input. I sort of vaguely hope that registrars or resellers could hook it into their systems and shove the output into EPP...</div><div><br></div><div>Still todo: man page, finish test script and ATFify it, output file handling. There's a longer term todo list which will go in the BUGS section of the man page :-)</div><div><br></div><div>I'm not confident I am using the libdns API very well: I have not got to grips with the rdata abstractions in detail before, so I had to learn a lot. I would love it if anyone can point out any ways I can simplify the code. <br><br><div>Tony.<div>-- </div><div>f.anthony.n.finch <<a href="mailto:dot@dotat.at">dot@dotat.at</a>> <a href="http://dotat.at">http://dotat.at</a></div></div></div></body></html>