[dns-operations] Root zone operational announcement: introducing ZONEMD for the root zone

Viktor Dukhovni ietf-dane at dukhovni.org
Wed Dec 6 20:54:03 UTC 2023


On Wed, Dec 06, 2023 at 08:36:22PM +0000, Wessels, Duane via dns-operations wrote:

> I’m happy to announce that the second phase of ZONEMD deployment for the root zone is now complete.  As of serial 2023120602, the hash algorithm field is set to 1:
> 
> ;; ANSWER SECTION:
> . 86400 IN ZONEMD 2023120602 1 1 9E877AB7584FF83F738D3F51CC914AF396741B7A49E50D0C9ED9BA05 ACA08FC9B62A56673D2D93D5720E4DD505733932

Congratulations and thanks!  Today, I did not receive what has recently
been a daily automated zone validation warning for my localroot slave
zone, since the zone now fully validates via ldns-verify-zone:

    $ named-compilezone -i local -jD -f raw -o - . root.slave |
        ldns-verify-zone -e P0Y0M3DT3H23M54S -V1 /dev/stdin
    zone ./IN: loaded serial 2023120602 (DNSSEC signed)
    OK

-- 
    Viktor.



More information about the dns-operations mailing list