[dns-operations] [Ext] The Collection of Yeti Technical activities and Findings

[Edward Lewis]

On 1/15/17, 20:53, "Davey Song(宋林健)" wrote:
>... because ICANN will kick off KSK rollover September 19, 2017. 

That date is incorrect.   

Depending on what you define as "kick off", of course, in some sense we have already done that.  We have created the key and installed it in one data center.  Installation at the other data center is planned for 2 February 2017 (Groundhog Day for some of us).   If all goes to plan then the new root zone KSK will be publicized after that date.

On 11 July 2017, we begin the "Automated Updates of DNSSEC Trust Anchors" protocol (aka RFC 5011).  This is when the DNS will "see" the rollover process.

For more details, please consult this page:
   https://www.icann.org/resources/pages/ksk-rollover
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2013 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20170119/caaed1e4/attachment.bin>