.NET Zone DNSSEC Operational Update -- ZSK length change

[Wessels, Duane]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


All,

Verisign is in the process of increasing the size and strength of
the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that
it operates.  As part of this process, the ZSK for the .NET zone
will be increased in size from 1024 to 1280 bits.

On July 10, 2019 the 1280 bit ZSK will be pre-published in the .NET
zone.  On July 15, the .NET zone will be signed with the 1280 bit
ZSK.  On July 20, the 1024 bit ZSK will be removed from the zone.

We do not anticipate any problems from this upgrade.  In accordance
with our normal operating procedures we have a rollback process
should it become necessary to revert to the 1024 bit ZSK.

DW

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCAAGBQJdJQifAAoJEGyZpGmowJiNVEsH/2T8Qm/ZZiM7K1G+6XN4wMSR
oqyuzY/0AiqXpw0C2aL3sE3VhYPZWTY+H5wwbvU+ZoAbiMfcOygBv/JTLizpjLLK
NJD+Gh51Z6cQn5yk9cPjRtoxdQrV83T0gRQIlPeFW3sm9GrXgropfQ/Dw7O0lHkZ
x2oiGwC0HF5npi6OWEHpETemtSMWl5HpFfmYZhzXoBSzEbzHgXQwr0Fie9wtNkDm
qPjwaeq3drENOoum4egpAFxQZM7FclLtyqqT24h0m5GeunHIcXRRcfoOAEnEmjRJ
b5ePCKxHqNY2Iz6MpiedTCpD2RIbI51wVhNGfmCiwyyl3500oqjvcmtYh00gCIU=
=XP9d
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4675 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190710/394968b3/attachment.bin>