[dns-operations] .FI going insecure for two weeks (!)
Paul Wouters
paul at nohats.ca
Tue Dec 17 20:04:01 UTC 2024
.fi customers got a note with:
Traficom changes the DNSSEC implementation used for .fi domain names by
changing the .FI signature algorithm. This change makes the domain name
system (DNS) more reliable and ensures the continued compatibility of
the DNSSEC implementation. Because of the change, .FI DS records will
be removed from the root zone. This will break the verification chain,
and DNSSEC will not be available to .fi domain names approximately from
17 April 2025 to 30 April 2025.
If anyone has some influence there and could perhaps convince them
to reduce "weeks" to "hours", I think that would be a very healthy
improvement of their process.
Paul
More information about the dns-operations
mailing list