<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Duane,<div class=""><br class=""></div><div class="">It’s also probably worth mentioning that there were 4 root zone changes to 4 TLDs (a name server addition and 3 DS record changes) between 2019081400 and 2019081601.</div><div class=""><br class=""></div><div class="">Regards,</div><div class="">-drc<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Aug 19, 2019, at 12:53 AM, Peter Andreev <<a href="mailto:andreev.peter@gmail.com" class="">andreev.peter@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Duane,<div class=""><br class=""></div><div class="">We were rotating KSK at that moment and when IANA reported completion of changes we proceeded to next step and this action was a bit premature.</div></div><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><div class="gmail_quote" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div dir="ltr" class="gmail_attr">пн, 19 авг. 2019 г. в 08:51, Wessels, Duane <<a href="mailto:dwessels@verisign.com" class="">dwessels@verisign.com</a>>:<br class=""></div><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><br class=""><br class="">> On Aug 16, 2019, at 1:44 PM, Peter Andreev <<a href="mailto:andreev.peter@gmail.com" target="_blank" class="">andreev.peter@gmail.com</a>> wrote:<br class="">><span class="Apple-converted-space"> </span><br class="">><span class="Apple-converted-space"> </span><br class="">> Hello,<br class="">> <span class="Apple-converted-space"> </span><br class="">> Root zone on<span class="Apple-converted-space"> </span><a href="http://c.root-servers.net/" rel="noreferrer" target="_blank" class="">c.root-servers.net</a><span class="Apple-converted-space"> </span>is obsoleted and this causes a lot of DNSSec-related errors.<br class="">> So I'm looking for someone who can help with coping with the problem. <span class="Apple-converted-space"> </span><br class="">> <span class="Apple-converted-space"> </span><br class="">> host-47-37:~ apn$ dig @<a href="http://a.root-servers.net/" rel="noreferrer" target="_blank" class="">a.root-servers.net</a><span class="Apple-converted-space"> </span>. SOA +short<br class="">><span class="Apple-converted-space"> </span><a href="http://a.root-servers.net/" rel="noreferrer" target="_blank" class="">a.root-servers.net</a>.<span class="Apple-converted-space"> </span><a href="http://nstld.verisign-grs.com/" rel="noreferrer" target="_blank" class="">nstld.verisign-grs.com</a>. 2019081601 1800 900 604800 86400<br class="">> host-47-37:~ apn$ dig @<a href="http://c.root-servers.net/" rel="noreferrer" target="_blank" class="">c.root-servers.net</a><span class="Apple-converted-space"> </span>. SOA +short<br class="">><span class="Apple-converted-space"> </span><a href="http://a.root-servers.net/" rel="noreferrer" target="_blank" class="">a.root-servers.net</a>.<span class="Apple-converted-space"> </span><a href="http://nstld.verisign-grs.com/" rel="noreferrer" target="_blank" class="">nstld.verisign-grs.com</a>. 2019081400 1800 900 604800 86400<br class=""><br class=""><br class="">Hi Peter,<br class=""><br class="">Can you say more about what sorts of DNSSEC-related errors you observed?<br class=""><br class="">For root zone serial 2019081400, the ZSK signatures were set to expire at<br class="">2019-08-27T05:00:00 and the KSK signatures were set to expire at<br class="">2019-08-31T00:00:00, so I'm not sure what the problem might've been.<br class=""><br class="">DW<br class=""><br class=""><br class=""></blockquote></div><br clear="all" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><div dir="ltr" class="gmail_signature" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">Is there any problem Exterminatus cannot solve? I have not found one yet.<br class=""><br class=""></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">dns-operations mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><a href="mailto:dns-operations@lists.dns-oarc.net" class="">dns-operations@lists.dns-oarc.net</a></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" class="">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 10px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><style class="">ul[class*='mb-extra__public-links'], ul[class*='mb-note__public-links'], ul[class*='mb-task__public-links'] { display: none !important; }</style></div></blockquote></div><br class=""></div></body></html>