.COM Zone DNSSEC Operational Update -- ZSK length change

[Wessels, Duane]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

All,

Verisign is in the process of increasing the size and strength of
the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that
it operates.  As part of this process, the ZSK for the .COM zone will
be increased in size from 1024 to 1280 bits.

On October 10, 2019 the 1280 bit ZSK was pre-published in the .COM zone.
On October 15, we plan to sign the .COM zone with the 1280 bit ZSK.
On October 20, we plan to remove the old 1024 bit ZSK from the zone.

We do not anticipate any problems from this upgrade.  In accordance
with our normal operating procedures we have a rollback process should
it become necessary to revert to the 1024 bit ZSK.

DW
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCAAGBQJdpL5zAAoJEGyZpGmowJiNKZsH/3D1uNJ959pOoZjiRWHd/bZ5
V6mNXkKA34jKudC0ugPt1RQGEExspsNHBTjSK//SO+nayKl8GQUdrnL5AINJKQjU
C61nhFORQXxhrE7JTbbbLeiVWVMwBhWmefi9zNIi/2MANWhX0UzuKREfsAnUgyVL
9mbfxxFCmAC6HPVkE3wZS5Z8h+3AP4zkctLOWQv/wi0aCd6o6/k9fejpmN2YhFQy
7OrFqKpTq0wa7K1zx8xXyBNPstWlH0709zn3Cm6aYkQ7mLoCNl2H6ODJCmvtTZeo
BYVKGojABUWXAurOiPSaljGHRAEC1sN5cV5rkeWmXjoRo+dGPOA60bzbdNsTfss=
=J3+s
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4675 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20191014/a4b1593b/attachment.bin>