{% extends template.parent.name %}
{% block content %}
Dear customer,

Our automated DNSSEC-key management system has discovered one or more valid CDNSKEY records on all DNS servers of your domain {{ domain }}. The CDNSKEY record(s) contained the following key(s):

{% for item in keys %}[flags: {{ item.flags|floatformat:0 }}, protocol: {{ item.protocol|floatformat:0 }}, algorithm: {{ item.algorithm|floatformat:0 }}, key: "{{ item.key }}"]
{% endfor %}
Discovered at: {{ datetime }}

In compliance with RFC 7344 and RFC 8078, we are considering the presence of these records as a request to publish these keys in the {{ zone }} zone and therefore your domain is now in the mode of transition to the automated DNSSEC-key management.

From now on, the presence of the stated CDNSKEY records on the domain servers of your domain will be checked on a daily basis. Unless we notice any change of CDNSKEY records on any of these DNS servers in the next {{ days_to_left }} days, these keys will be stored in a new keyset in the central registry and subsequently published as DS records in the {{ zone }} zone. Unless you react to this email, your domain will keep working as until now and besides, it will be newly protected by DNSSEC and the administration of DNSSEC keys will then run automatically based on your published CDNSKEY records.

The process of transition of your domain to the automated DNSSEC-key management can be stopped by removing CDNSKEY records within the {{ days_to_left }}-day period.

Yours sincerely
Support of CZ.NIC, the CZ domain registry
{% endblock %}
