[dns-operations] [Ext] Reminder: New KSK Publication in DNS Root Zone
Bob Harold
rharolde at umich.edu
Wed Mar 26 13:44:48 UTC 2025
Thanks for the update.
I see "trust-anchor-telemetry '_ta-4f66-9728/IN'" from some departmental
DNS resolvers that forward to my university DNS resolvers. But searching
the internet for "trust anchor 9728" did not find anything.
I would like to suggest that the hex representation be added to the Key
Status table on page "https://www.iana.org/dnssec/files" to make it easier
to find and match the key to the telemetry.
--
Bob Harold
On Tue, Jan 7, 2025 at 3:21 PM Andres Pavez <andres.pavez at iana.org> wrote:
> Please note that there is a mistake with the time in my previous email.
> The new Key Signing Key (KSK) will be published in the DNS root zone on
> January 11 around 06:00 UTC, not 00:00 UTC as originally stated.
> Best regards,
> --
> Andres Pavez
> Cryptographic Key Manager
>
>
> On 1/7/25, 11:37, "dns-operations on behalf of Andres Pavez" <
> dns-operations-bounces at dns-oarc.net <mailto:
> dns-operations-bounces at dns-oarc.net> on behalf of andres.pavez at iana.org
> <mailto:andres.pavez at iana.org>> wrote:
>
>
> This is a reminder that the new Key Signing Key (KSK) will be published in
> the DNS root zone starting January 11 at 00:00:00 UTC.
>
>
> This will start the process of adoption of this trust anchor in RFC 5011
> aware resolvers. We encourage operators to pay attention during this
> process to monitor for any unexpected consequences.
>
>
> Publishing the KSK is part of the process of ensuring widespread adoption
> of the KSK prior to its use in signing, currently scheduled for October
> 2026.
>
>
> For more details, please visit: https://www.iana.org/dnssec/files <
> https://www.iana.org/dnssec/files>
>
>
> Thanks,
> --
> Andres Pavez
> Cryptographic Key Manager
>
>
>
>
>
>
>
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20250326/71914f06/attachment.html>
More information about the dns-operations
mailing list