[dns-operations] .FI going insecure for two weeks (!)

[Frederico A C Neves]

On Fri, May 23, 2025 at 07:43:18AM -0300, Frederico A C Neves wrote:
> On Wed, May 21, 2025 at 03:14:24PM +0200, Arnold Dechamps via dns-operations wrote:
> > Date: Wed, 21 May 2025 15:14:24 +0200
> > From: Arnold Dechamps <arnold at adechamps.net>
> > To: Joe Abley <jabley at strandkip.nl>
> > Cc: Shumon Huque <shuque at gmail.com>, dns-operations at dns-oarc.net
> > Subject: Re: [dns-operations] .FI going insecure for two weeks (!)
> > 
> > Hello Everyone,
> > 
> > I did not have the opportunity to monitor this during the transition. I see that they transitioned to algo 13 though. Did they went insecure in the end? Is there somewhere I could see what happened in the past with their dnssec?
> > 
> 
>  From what is recorded at dnsviz with a ~1 day granularity, yes.
> 
> 20250417-193258 UTC - Last alg #8
> https://dnsviz.net/d/fi/aAFXag/dnssec/
> 
> 20250418-204723 UTC - First insecure
> https://dnsviz.net/d/fi/aAK6Ww/dnssec/
> 
> 20250419-100553 UTC - Last insecure
> https://dnsviz.net/d/fi/aAN1gQ/dnssec/
> 
> 20250420-075539 UTC - First alg #13
> https://dnsviz.net/d/fi/aASoew/dnssec/

Actually,

20250422-215938 UTC - First alg #13 DS
https://dnsviz.net/d/fi/aAgRSg/dnssec/

The previous one is the first time the zone apeared signed with alg #13.

Mastodns has "better" chronological information from the root perspective.

20250415-2044 remove alg #8 ds
https://mastodns.net/@diffroot/114344636547850162

20250422-1853 include alg #13 ds
https://mastodns.net/@diffroot/114383836309131015

Fred