[dns-operations] .SE moving from DNSSEC algo 5 to 8

[Roger Murray]

No worries, let us know if you need anymore info.

/rog
> On 8Dec, 2017, at 19:14 , Richard Lamb <slamb at xtcn.com> wrote:
> 
> Many thanks Roger.  Ill use the .SE alg roll as an example in my classes. -Rick
> 
> 
> On Fri, Dec 8, 2017 at 6:38 AM, Roger Murray <roger.murray at iis.se <mailto:roger.murray at iis.se>> wrote:
> The zone was taking up about 1.6GB in memory before we started the algorithm roll, with all the signatures in the zone the size went up to 2.3GB.
> 
> /rog
>> On 8Dec, 2017, at 08:56 , Jakob Schlyter <jakob at kirei.se <mailto:jakob at kirei.se>> wrote:
>> 
>> Do you have any numbers to share?
>> 
>> 
>> jakob
>> 
>> 
>> Forwarded message:
>> 
>> From: Richard Lamb <slamb at xtcn.com <mailto:slamb at xtcn.com>>
>> To: Jakob Schlyter <jakob at kirei.se <mailto:jakob at kirei.se>>
>> Subject: Re: [dns-operations] .SE moving from DNSSEC algo 5 to 8
>> Date: Wed, 6 Dec 2017 09:09:38 -0800
>> excellent...
>> How much bigger did the SE zonefile get due to the double signing of DS records?
>> 
>> 
>> 
>> On Wed, Dec 6, 2017 at 12:21 AM, Jakob Schlyter <jakob at kirei.se <mailto:jakob at kirei.se>> wrote:
>> FYI, .SE is under way moving from RSA/SHA-1 (5) 2048/1024 to RSA/SHA-256
>> (8) 2048/2048 - http://dnsviz.net/d/se/dnssec/ <http://dnsviz.net/d/se/dnssec/>. DS at root is not yet
>> updated.
>> 
>>         jakob
>> _______________________________________________
>> dns-operations mailing list
>> dns-operations at lists.dns-oarc.net <mailto:dns-operations at lists.dns-oarc.net>
>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>> dns-operations <https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-operations> mailing list
>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations <https://lists.dns-oarc.net/mailman/listinfo/dns-operations>
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20171211/3e9a2b52/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20171211/3e9a2b52/attachment.sig>