[dns-operations] Root zone operational announcement: introducing ZONEMD for the root zone

[Wessels, Duane]

I’m happy to announce that the second phase of ZONEMD deployment for the root zone is now complete.  As of serial 2023120602, the hash algorithm field is set to 1:

;; ANSWER SECTION:
. 86400 IN ZONEMD 2023120602 1 1 9E877AB7584FF83F738D3F51CC914AF396741B7A49E50D0C9ED9BA05 ACA08FC9B62A56673D2D93D5720E4DD505733932

DW


> On Sep 21, 2023, at 8:04 AM, Wessels, Duane <dwessels at verisign.com> wrote:
> 
> This work is now complete and as of approximately 13:20 UTC today all DNS root servers have begun serving a root zone that includes a ZONEMD record, with a private use algorithm number.
> 
> On December 6th we plan to change the root zone ZONEMD record to the SHA384 algorithm number, at which time it will become fully verifiable.
> 
> 
> DW
> 
>> On Sep 12, 2023, at 2:44 PM, Wessels, Duane via dns-operations <dns-operations at dns-oarc.net> wrote:
>> 
>> 
>> 
>> Verisign and ICANN were originally planning to enable ZONEMD for
>> the root zone tomorrow, September 13th.  During a deployment to the
>> operational testing environment, we discovered a minor issue.  As
>> a result, we, in cooperation with ICANN, have decided to postpone
>> the production deployment of ZONEMD until next week, on September
>> 21st.
>> 
>> DW
>