DNSSEC howto/api for TLD maintainers?

[Jacco Tunnissen]

Today, I came across this interesting question from Mr Lucy E. Lynch on the
NANOG list (June, 2006).

  ---------------------------------------------------------------------------

  http://www.merit.edu/mail.archives/nanog/msg00653.html

  * From: Lucy E. Lynch
  * Date: Wed Jun 14 11:00:55 2006 

  along these lines - there seem to be a huge number of smallish tools
  related to DNSSEC, but I don't find anything that looks like a package
  with a couple of tools and scripts that would be usable by a small ccTLD -
  recommendations and good written exercises that step a newbie through the
  process would be very useful - any pointers? I've already looked at:

  http://www.dnssec-deployment.org/
  http://www.dnssec.net/software
  http://www.ripe.net/disi/dnssec_howto/
  http://www.dnssec-tools.org/

  lots of info - but a cheat sheet and some recommendations for basic tools
  are needed to get this deployed and used.

  ---------------------------------------------------------------------------

As far as I can see, this question remains unanswered on the list. Perhaps
there was a private reply. Since I'm interested too, I'm asking this list
for more details.

In the past I've also suggested that a good "DNSSEC Howto" and/or API
targeted specifically at TLD maintainers would be a nice thing to have, but
I'm not aware of current initiatives in this area, if any. Something like
the comprehensive DNSSEC Howto from Olaf/RIPE NCC, but then written for a
different audience.

Such a document may also show relations with EPP, how DNSSEC technically
fits into the larger DNS framework and well-known methods currently used in
the Reg-Reg community, and include cases from .SE and .NL (if those parties
are willing to share the info, of course).

Anyone? Please let me know.

Thanks,

Jacco Tunnissen
-- 
http://www.dnssec.net/
DNSSEC: DNS Security Extensions
Securing the Domain Name System