<div dir="ltr"><div><div>For those of us who need a refresher on what's going on, Duane's article in CircleID is a good overview:<br><a href="http://www.circleid.com/posts/20160506_increasing_the_strength_of_the_zone_signing_key_for_the_root_zone/">http://www.circleid.com/posts/20160506_increasing_the_strength_of_the_zone_signing_key_for_the_root_zone/</a><br><br></div>Thanks for authoring these public documents, Duane.<br><br></div>Jonathan<br><div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Sep 20, 2016 at 10:26 AM, Wessels, Duane <span dir="ltr"><<a target="_blank" href="mailto:dwessels@verisign.com">dwessels@verisign.com</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">Yes, please do let us know of any known or suspected issues as the ZSK rollover proceeds over the course of the next few days.<br>
<br>
DW<br>
<div><div class="gmail-h5"><br>
<br>
<br>
> On Sep 20, 2016, at 7:50 AM, Paul Hoffman <<a href="mailto:phoffman@proper.com">phoffman@proper.com</a>> wrote:<br>
><br>
> Of course, if anyone here sees any indication of badness, please report it here and to Verisign at <a href="mailto:info@verisign-grs.com">info@verisign-grs.com</a>.<br>
><br>
> --Paul Hoffman<br>
><br>
> dig @<a target="_blank" rel="noreferrer" href="http://a.root-servers.net">a.root-servers.net</a> . dnskey<br>
><br>
> ; <<>> DiG 9.10.3-P4-Ubuntu <<>> @<a target="_blank" rel="noreferrer" href="http://a.root-servers.net">a.root-servers.net</a> . dnskey<br>
> ; (2 servers found)<br>
> ;; global options: +cmd<br>
> ;; Got answer:<br>
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17841<br>
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1<br>
> ;; WARNING: recursion requested but not available<br>
><br>
> ;; OPT PSEUDOSECTION:<br>
> ; EDNS: version: 0, flags:; udp: 1232<br>
> ;; QUESTION SECTION:<br>
> ;. IN DNSKEY<br>
><br>
> ;; ANSWER SECTION:<br>
> . 172800 IN DNSKEY 256 3 8 AwEAAYbinauHA9oUb4aGNtJIrepyGo<wbr>Yy0OL01rvIhvo3RWN/Ch8p2C4Z EkpvUYkx74r9JpgrOsjKOv+<wbr>JQdKtT2u8AxGjUoH8x8HdpDiMV7Xnp<wbr>WJo 9wAxlFtDtbMnPwRQ3dWsT1p5myrGcm<wbr>7EFJ9j7KmiAEG5hGsevZqcnqMO W9QFkmp/<wbr>zM0TFYXYWq6AsAof2uZqLUyd+<wbr>nHIW0TGsaHMzcTNfA8Ww+OY V7R4bcR/<wbr>8edCEo6OAh9j48R1hRtuO1e2MQdnkI<wbr>Tc9DJljB4Cq1gQKwv/ ku7mAvmFuWkRotMZIFN3vDhpmpmy7M<wbr>0C1EHSRAgP+HkblLRQKOPnwI/V ksJEU4fmnhk=<br>
> . 172800 IN DNSKEY 256 3 8 AwEAAcCsATzyk1Hj1xabagAGWi9sZS<wbr>bB+igdzDM8CMZ5fPcOb314yP9/ lmvidoBuApPlMVwlz0lXaj6gzyjoOK<wbr>BveoDD0VyHTqjCDg9UrcDoClNZ ciR2sHZoaMZp2yVNFyaC+<wbr>7MkA8lsrCShieYPEowSjQdkvY5ONlE<wbr>ib/AT XdmAhfgB<br>
> . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+<wbr>9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGC<wbr>zh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP<wbr>/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAz<wbr>vN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQz<wbr>gul0sGIcGOYl7OyQdXfZ57relS Qageu+<wbr>ipAdTTJ25AsRTAoub8ONGcLmqrAmRL<wbr>KBP1dfwhYB4N7knNnulq QxA+Uk1ihz0=<br>
><br>
> ;; Query time: 45 msec<br>
> ;; SERVER: 2001:503:ba3e::2:30#53(2001:<wbr>503:ba3e::2:30)<br>
> ;; WHEN: Tue Sep 20 14:47:23 UTC 2016<br>
> ;; MSG SIZE rcvd: 725<br>
><br>
</div></div>> ______________________________<wbr>_________________<br>
> dns-operations mailing list<br>
> <a href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.<wbr>net</a><br>
> <a target="_blank" rel="noreferrer" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/<wbr>mailman/listinfo/dns-<wbr>operations</a><br>
> dns-operations mailing list<br>
> <a target="_blank" rel="noreferrer" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/<wbr>mailman/listinfo/dns-<wbr>operations</a><br>
<br>
<br>
______________________________<wbr>_________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.<wbr>net</a><br>
<a target="_blank" rel="noreferrer" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations%0Adns-operations">https://lists.dns-oarc.net/<wbr>mailman/listinfo/dns-<wbr>operations<br>
dns-operations</a> mailing list<br>
<a target="_blank" rel="noreferrer" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/<wbr>mailman/listinfo/dns-<wbr>operations</a><br>
</blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature">     Jonathan</div>
</div></div></div></div></div>