[dns-operations] Signing of the ARPA zone
Joe Abley
joe.abley at icann.org
Tue Mar 16 13:13:34 UTC 2010
On 2010-03-16, at 08:34, Chris Thompson wrote:
> On Mar 15 2010, I wrote:
>
>> The servers that are delivering a signed "arpa" so far have DNSKEY/RRSIG
>> records using algorithm RSASHA1 (5) rather than RSASHA256 (8). Has there
>> been a change of plan in that respect?
>
> Ah... today they (that's [ghiklm].root-servers.net so far) have switched
> to an RSASHA256-signed version of "arpa".
>
> There has to be story behind this... :-)
:-)
We will publish a summary of events once we've finished the operational work. Once again, though, many thanks (to you and others) for keeping an eye on us.
Joe
More information about the dns-operations
mailing list