[dns-operations] .NET Zone DNSSEC Operational Update -- ZSK length change

[Mark Andrews]

Absolutely nothing.  

> On 10 Jul 2019, at 12:28 pm, Y. peng <ypeng at gmx.net> wrote:
> 
> what should we do as ISP cache DNS server operator?
> 
> 
>> Verisign is in the process of increasing the size and strength of
>> the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that
>> it operates.  As part of this process, the ZSK for the .NET zone
>> will be increased in size from 1024 to 1280 bits.
>> 
>> On July 10, 2019 the 1280 bit ZSK will be pre-published in the .NET
>> zone.  On July 15, the .NET zone will be signed with the 1280 bit
>> ZSK.  On July 20, the 1024 bit ZSK will be removed from the zone.
>> 
>> We do not anticipate any problems from this upgrade.  In accordance
>> with our normal operating procedures we have a rollback process
>> should it become necessary to revert to the 1024 bit ZSK.
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org