<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">No worries, let us know if you need anymore info.<div class=""><br class=""></div><div class="">/rog<br class=""><div><blockquote type="cite" class=""><div class="">On 8Dec, 2017, at 19:14 , Richard Lamb <<a href="mailto:slamb@xtcn.com" class="">slamb@xtcn.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div dir="ltr" class=""><div class="gmail_default" style="font-family:monospace,monospace">Many thanks Roger. Ill use the .SE alg roll as an example in my classes. -Rick</div><div class="gmail_default" style="font-family:monospace,monospace"><br class=""></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On Fri, Dec 8, 2017 at 6:38 AM, Roger Murray <span dir="ltr" class=""><<a href="mailto:roger.murray@iis.se" target="_blank" class="">roger.murray@iis.se</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word" class="">
The zone was taking up about 1.6GB in memory before we started the algorithm roll, with all the signatures in the zone the size went up to 2.3GB.
<div class="">
<div class=""><br class="">
</div>
<div class="">/rog<br class="">
<div class="">
<blockquote type="cite" class="">
<div class="">On 8Dec, 2017, at 08:56 , Jakob Schlyter <<a href="mailto:jakob@kirei.se" target="_blank" class="">jakob@kirei.se</a>> wrote:</div>
<br class="m_-8920212427918589750Apple-interchange-newline">
<div class="">
<div class="m_-8920212427918589750plaintext" style="white-space:normal;font-family:sans-serif;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px"><p dir="auto" class="">Do you have any numbers to share?</p>
<br class=""><p dir="auto" class="">jakob</p>
<br class=""><p dir="auto" class="">Forwarded message:</p>
</div>
<blockquote class="m_-8920212427918589750embedded" style="margin:0px 0px 5px;padding-left:5px;border-left-width:2px;border-left-style:solid;border-left-color:rgb(119,119,119);color:rgb(119,119,119);font-family:sans-serif;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><p dir="auto" class="">From: Richard Lamb <<a href="mailto:slamb@xtcn.com" target="_blank" class="">slamb@xtcn.com</a>><br class="">
To: Jakob Schlyter <<a href="mailto:jakob@kirei.se" target="_blank" class="">jakob@kirei.se</a>><br class="">
Subject: Re: [dns-operations] .SE moving from DNSSEC algo 5 to 8<br class="">
Date: Wed, 6 Dec 2017 09:09:38 -0800<br class="">
</p><div class=""><div class="h5">
<div dir="ltr" class="">
<div style="font-family:monospace,monospace" class="">excellent...</div>
<div style="font-family:monospace,monospace" class="">How much bigger did the SE zonefile get due to the double signing of DS records?</div>
<div style="font-family:monospace,monospace" class=""><br class="">
</div>
<div style="font-family:monospace,monospace" class=""><br class="">
</div>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Wed, Dec 6, 2017 at 12:21 AM, Jakob Schlyter<span class="m_-8920212427918589750Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:jakob@kirei.se" target="_blank" class="">jakob@kirei.se</a>></span><span class="m_-8920212427918589750Apple-converted-space"> </span>wrot<wbr class="">e:<br class="">
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
FYI, .SE is under way moving from RSA/SHA-1 (5) 2048/1024 to RSA/SHA-256<br class="">
(8) 2048/2048 -<span class="m_-8920212427918589750Apple-converted-space"> </span><a href="http://dnsviz.net/d/se/dnssec/" rel="noreferrer" target="_blank" class="">http://dnsviz.net/d/se/<wbr class="">dnssec/</a>. DS at root is not yet<br class="">
updated.<br class="">
<br class="">
jakob<br class="">
______________________________<wbr class="">_________________<br class="">
dns-operations mailing list<br class="">
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank" class="">dns-operations@lists.dns-oarc.<wbr class="">net</a><br class="">
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-operations" rel="noreferrer" target="_blank" class="">https://lists.dns-oarc.net/mai<wbr class="">lman/listinfo/dns-operations<br class="">
dns-operations</a><span class="m_-8920212427918589750Apple-converted-space"> </span>mailing list<br class="">
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank" class="">https://lists.dns-oarc.net/mai<wbr class="">lman/listinfo/dns-operations</a></blockquote>
</div>
</div>
</div></div></blockquote>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</div>
</blockquote></div><br class=""></div></div>
</div></blockquote></div><br class=""></div></body></html>