[dns-operations] .FI going insecure for two weeks (!)

Paul Wouters paul at nohats.ca
Tue Dec 17 20:04:01 UTC 2024


.fi customers got a note with:

 	Traficom changes the DNSSEC implementation used for .fi domain names by
 	changing the .FI signature algorithm. This change makes the domain name
 	system (DNS) more reliable and ensures the continued compatibility of
 	the DNSSEC implementation. Because of the change, .FI DS records will
 	be removed from the root zone. This will break the verification chain,
 	and DNSSEC will not be available to .fi domain names approximately from
 	17 April 2025 to 30 April 2025.

If anyone has some influence there and could perhaps convince them
to reduce "weeks" to "hours", I think that would be a very healthy
improvement of their process.

Paul


More information about the dns-operations mailing list