ICANN opens consultation on automated DNSSEC security records
ICANN is inviting public feedback on an assessment of the security and stability implications of automating DNSSEC Delegation Signer (DS) records. The assessment will inform a fast-track process for evaluating registry services that support this automation, with comments open until 23 November 2026.
The Internet Corporation for Assigned Names and Numbers (ICANN) is seeking public input on whether proposed automation of DNSSEC Delegation Signer records meets the security and stability requirements of the domain name system.
The consultation, announced on 13 October 2026, concerns an assessment of automating DS records, which help connect a domain’s security information in the Domain Name System (DNS) to the cryptographic keys used to verify its authenticity. DNSSEC, or Domain Name System Security Extensions, helps protect users against certain forms of tampering with DNS data.
Managing these records can involve coordination between domain registries and the organisations responsible for individual domains. Automating the process could reduce the need for manual handling, but changes to how the records are managed must account for the security and stability of the wider DNS.
ICANN’s assessment will serve as the basis for a Fast-Track Registry Services Evaluation Process for DNSSEC DS record automation. The public consultation asks whether the report adequately identifies the relevant security and stability requirements, including those set out in applicable Requests for Comments (RFCs), which document technical standards and guidance for internet protocols.
The consultation opened on 12 October 2026 and will close on 23 November. Feedback will help inform consideration of the assessment before the fast-track evaluation process proceeds.
The consultation documents and submission details are available on ICANN’s public comment webpage.
