[dns-operations] First Root Zone DNSSEC KSK Ceremony

Joe Abley jabley at hopcount.ca
Sun Jun 6 17:52:30 UTC 2010


On 2010-06-05, at 19:08, Doug Barton wrote:

> On 06/02/10 20:53, Joe Abley wrote:
>> Observers will be able to watch the
>> proceedings within the ceremony room in real-time using a
>> closed-circuit audio-visual feed from the ceremony room, and staff
>> will be available to answer questions those attending might have
>> about what they are seeing.
> 
> Given that you're going to have A/V capability, has any thought been given to streaming it?

Full audio-visual accounts of the ceremony, together with other audit-relevant data will be made available after the ceremony has taken place, but before we go live on July 15.

We have staff on hand who are well-practiced at streaming audio and video over the Internet (e.g. at ICANN meetings) but decided that the best and most predictable way to provide transparency in process was not to stream in real time. This allows us to avoid any possible ambiguity that might otherwise arise about whether the ceremony was executed correctly in the event that we had technical difficulties with the AV stream.

The first ceremony is a long one (since it includes HSM initialisation and key initialisation as well as KSR processing) with the logistical challenge of a full set of TCRs in attendance for enrolment as Crypto Officers and Recovery Key Share Holders, and operationally it does not seem prudent to add more variables like video distribution into what is already going to be a full day.

We may well change our minds about live streaming in the future, but this is the plan for ceremony 1.


Joe




More information about the dns-operations mailing list