[dns-operations] Why did .KE go insecure? ns36.cdns.net

Viktor Dukhovni ietf-dane at dukhovni.org
Fri Sep 23 18:30:00 UTC 2022


On Fri, Sep 23, 2022 at 07:48:50PM +0200, Bill Woodcock wrote:

> > On Sep 23, 2022, at 7:27 PM, Jacques Latour <Jacques.Latour at cira.ca> wrote:
> > Just looking quickly, if you look back in dnsviz on Sept 15, I think a KSK roll over didn't go as plan...
> 
> That was not the root cause.  I’m sure they’ll discuss it when they’re ready to.

I concur.  There were no observed DNSSEC issues, such as a problem
rollover, ...  The DS records were withdrawn cleanly, with the RRSIGs
still in place long enough to not cause any issues.

-- 
    Viktor.



More information about the dns-operations mailing list