Key Design Features

Simplicity

The DRPF only requires the addition of two simple DNS text records to provably declare the relationship between two different domains.

Immediate Value

The DRPF doesn't require universal adoption to demonstrate it's value. Any domain publishing relationship policies will benefit from doing so.

Extensibility

While simple use cases are easily supported, the underlying power of the DRPF is found in it's inherent extensibility in providing human and machine-readable policies.

Increased Security

Security decisions are currently made based on inferred relationships between domains. The DRPF removes ambiguity by clearly declaring administrative policies.

Current Status of the DRPF

To avoid doubt and be clear... the Domain Relationship Policy Framework (DRPF) is still being developed. The work is a proposed framework that has emerged from countless conversations between technologists and security researchers struggling with how to introduce reliably verifiable information about how domains are related and how to interact with them. Throughout this site you will read information about the proposed model and how it can be used... if it was ever to be standardized. You'll undoubtedly be frustrated with the lack of specificity for how to actually deploy and use it yourself. But that is precisely why we're glad you're here. We hope that you're sufficiently intrigued by the proposal, see value in the use cases presented, and are interested in helping to develop the concept further.

This is the first public presentation of the information, after developing it slowly over the past few years. We're currently working on formal submissions to various standards bodies (e.g. the IETF) for broader consideration and input. Until then, though, we're only an ad-hoc group developing the basic idea. So, if you're interested in joining the conversation, pleas consider contacting us.

The Collaborators

Image 1

Trying to look important.

Image 2

How our kids see us.

Image 3

How we look in mass media.

Image 4

What we think of ourselves.

The DRFP was initially proposed in 2021, informed by previous attempts to chase related solutions going back more than a decade. An initial whitepaper describing the DRPF was published with a CC-BY license to enable the work to evolve. Since then it has gathered momentum as folks have seen how the simple extensibility of the model could support innumerable use cases. What started as informal conversations between industry colleagues has grown into a loose collaboration to more thoroughly flesh out the idea. As the conceptual model comes into focus, the time has come to share the work more broadly on the road toward submitting a draft for consideration by the IETF.



Mastodon