[dns-operations] Signing of the ARPA zone

Joe Abley joe.abley at icann.org
Tue Mar 16 13:13:34 UTC 2010


On 2010-03-16, at 08:34, Chris Thompson wrote:

> On Mar 15 2010, I wrote:
> 
>> The servers that are delivering a signed "arpa" so far have DNSKEY/RRSIG
>> records using algorithm RSASHA1 (5) rather than RSASHA256 (8). Has there
>> been a change of plan in that respect?
> 
> Ah... today they (that's [ghiklm].root-servers.net so far) have switched
> to an RSASHA256-signed version of "arpa".
> 
> There has to be story behind this... :-)

:-)

We will publish a summary of events once we've finished the operational work. Once again, though, many thanks (to you and others) for keeping an eye on us.


Joe


More information about the dns-operations mailing list