[dns-operations] The longer ZSK is in

[Jonathan Stewart]

For those of us who need a refresher on what's going on, Duane's article in
CircleID is a good overview:
http://www.circleid.com/posts/20160506_increasing_the_strength_of_the_zone_signing_key_for_the_root_zone/

Thanks for authoring these public documents, Duane.

Jonathan

On Tue, Sep 20, 2016 at 10:26 AM, Wessels, Duane <dwessels at verisign.com>
wrote:

> Yes, please do let us know of any known or suspected issues as the ZSK
> rollover proceeds over the course of the next few days.
>
> DW
>
>
>
> > On Sep 20, 2016, at 7:50 AM, Paul Hoffman <phoffman at proper.com> wrote:
> >
> > Of course, if anyone here sees any indication of badness, please report
> it here and to Verisign at info at verisign-grs.com.
> >
> > --Paul Hoffman
> >
> > dig @a.root-servers.net . dnskey
> >
> > ; <<>> DiG 9.10.3-P4-Ubuntu <<>> @a.root-servers.net . dnskey
> > ; (2 servers found)
> > ;; global options: +cmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17841
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
> > ;; WARNING: recursion requested but not available
> >
> > ;; OPT PSEUDOSECTION:
> > ; EDNS: version: 0, flags:; udp: 1232
> > ;; QUESTION SECTION:
> > ;. IN DNSKEY
> >
> > ;; ANSWER SECTION:
> > . 172800 IN DNSKEY 256 3 8 AwEAAYbinauHA9oUb4aGNtJIrepyGoYy0OL01rvIhvo3RWN/Ch8p2C4Z
> EkpvUYkx74r9JpgrOsjKOv+JQdKtT2u8AxGjUoH8x8HdpDiMV7XnpWJo
> 9wAxlFtDtbMnPwRQ3dWsT1p5myrGcm7EFJ9j7KmiAEG5hGsevZqcnqMO W9QFkmp/
> zM0TFYXYWq6AsAof2uZqLUyd+nHIW0TGsaHMzcTNfA8Ww+OY V7R4bcR/
> 8edCEo6OAh9j48R1hRtuO1e2MQdnkITc9DJljB4Cq1gQKwv/
> ku7mAvmFuWkRotMZIFN3vDhpmpmy7M0C1EHSRAgP+HkblLRQKOPnwI/V ksJEU4fmnhk=
> > . 172800 IN DNSKEY 256 3 8 AwEAAcCsATzyk1Hj1xabagAGWi9sZSbB+igdzDM8CMZ5fPcOb314yP9/
> lmvidoBuApPlMVwlz0lXaj6gzyjoOKBveoDD0VyHTqjCDg9UrcDoClNZ
> ciR2sHZoaMZp2yVNFyaC+7MkA8lsrCShieYPEowSjQdkvY5ONlEib/AT XdmAhfgB
> > . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
> FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
> bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
> X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
> W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+
> ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0=
> >
> > ;; Query time: 45 msec
> > ;; SERVER: 2001:503:ba3e::2:30#53(2001:503:ba3e::2:30)
> > ;; WHEN: Tue Sep 20 14:47:23 UTC 2016
> > ;; MSG SIZE rcvd: 725
> >
> > _______________________________________________
> > dns-operations mailing list
> > dns-operations at lists.dns-oarc.net
> > https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> > dns-operations mailing list
> > https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations
> <https://lists.dns-oarc.net/mailman/listinfo/dns-operations%0Adns-operations>
> mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>



-- 
     Jonathan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20160920/4494ff27/attachment.html>