<div dir="ltr"><div dir="ltr"><div>Hi all,</div><div><br></div>The set of 4 maintenance windows was done(the last one was ~2 days ago).<br>The KSK rollover operation in our standby chain is complete.<br><br>@Peter, thanks for the suggestion(especially since we work with the multi-signer model).<div><br></div><div><br></div><div>Cheers,<br><div><div dir="ltr" class="gmail_signature"><div dir="ltr"><span><p dir="ltr" style="line-height:1.38;margin-top:10pt;margin-bottom:10pt"><span style="background-color:transparent;font-family:"Work Sans",sans-serif">--</span><br></p><p dir="ltr" style="line-height:1.38;margin-top:10pt;margin-bottom:10pt"><span style="color:rgb(32,32,32);font-family:Helvetica">Ngā mihi </span><span style="background-color:transparent;font-family:"Work Sans",sans-serif"><br></span></p><span style="font-family:"Work Sans",sans-serif;color:rgb(227,28,121);background-color:transparent;font-weight:700;vertical-align:baseline">Felipe Agnelli Barbosa</span><span style="font-family:"Work Sans",sans-serif;color:rgb(227,28,121);background-color:transparent;vertical-align:baseline"><br></span><font face="arial, sans-serif"><span style="background-color:transparent;vertical-align:baseline">DNS Specialist</span><span style="background-color:transparent;vertical-align:baseline"><br></span></font><span style="font-family:"Work Sans",sans-serif;color:rgb(227,28,121);background-color:transparent;font-weight:700;vertical-align:baseline">InternetNZ  |  Ipurangi Aotearoa</span><span style="font-family:"Work Sans",sans-serif;color:rgb(227,28,121);background-color:transparent;vertical-align:baseline"><br></span></span><div><font face="arial, sans-serif"><br style="color:rgb(136,136,136)"></font><span><span style="background-color:transparent;vertical-align:baseline"><font face="arial, sans-serif">We are the home of .nz and we work for an Internet that benefits all of Aotearoa.</font></span><span style="font-family:arial,sans-serif;background-color:transparent;vertical-align:baseline"><br></span><a href="https://www.internetnz.nz/" target="_blank"><span style="font-family:"Work Sans",sans-serif;color:rgb(17,85,204);background-color:transparent;vertical-align:baseline">www.internetnz.nz</span></a></span></div><div><br></div><div><font face="arial, sans-serif"><span style="font-weight:bold;color:rgb(227,28,121)">GPG:</span><span style="color:rgb(136,136,136)"><b> </b></span><font color="#888888">95C1 8BDC EFA7 9CAC 303D  003E A058 2449 D152 8580</font></font></div><div><font face="arial, sans-serif"><font color="#888888"><br></font></font></div><div><div><img width="200" height="65" src="https://ci3.googleusercontent.com/mail-sig/AIorK4w62rXlhPBDGFs_j_i50bJgnX8RAyjCK2vjxqkG1-T4tPr0nluW5zOEllcIkbuOWt1u6bxNZxQ"><br></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 9, 2024 at 3:18 AM Peter Thomassen <<a href="mailto:peter@desec.io">peter@desec.io</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Felipe,<br>
<br>
Thank you for sharing your plans.<br>
<br>
On 7/9/24 00:34, Felipe Barbosa via dns-operations wrote:<br>
> The current standby chain key tags for each zone are as follows:<br>
> nz: 49157, <a href="http://ac.nz" rel="noreferrer" target="_blank">ac.nz</a> <<a href="http://ac.nz/" rel="noreferrer" target="_blank">http://ac.nz/</a>>: 5938, <a href="http://co.nz" rel="noreferrer" target="_blank">co.nz</a> <<a href="http://co.nz/" rel="noreferrer" target="_blank">http://co.nz/</a>>: 59176, <a href="http://cri.nz" rel="noreferrer" target="_blank">cri.nz</a> <<a href="http://cri.nz/" rel="noreferrer" target="_blank">http://cri.nz/</a>>: 19190, <a href="http://geek.nz" rel="noreferrer" target="_blank">geek.nz</a> <<a href="http://geek.nz/" rel="noreferrer" target="_blank">http://geek.nz/</a>>: 7171,<br>
> <a href="http://gen.nz" rel="noreferrer" target="_blank">gen.nz</a> <<a href="http://gen.nz/" rel="noreferrer" target="_blank">http://gen.nz/</a>>: 48574, <a href="http://govt.nz" rel="noreferrer" target="_blank">govt.nz</a> <<a href="http://govt.nz/" rel="noreferrer" target="_blank">http://govt.nz/</a>>: 18181, <a href="http://health.nz" rel="noreferrer" target="_blank">health.nz</a> <<a href="http://health.nz/" rel="noreferrer" target="_blank">http://health.nz/</a>>: 33694, <a href="http://iwi.nz" rel="noreferrer" target="_blank">iwi.nz</a> <<a href="http://iwi.nz/" rel="noreferrer" target="_blank">http://iwi.nz/</a>>: 58454,<br>
> <a href="http://kiwi.nz" rel="noreferrer" target="_blank">kiwi.nz</a> <<a href="http://kiwi.nz/" rel="noreferrer" target="_blank">http://kiwi.nz/</a>>: 47464, <a href="http://maori.nz" rel="noreferrer" target="_blank">maori.nz</a> <<a href="http://maori.nz/" rel="noreferrer" target="_blank">http://maori.nz/</a>>: 21689, <a href="http://mil.nz" rel="noreferrer" target="_blank">mil.nz</a> <<a href="http://mil.nz/" rel="noreferrer" target="_blank">http://mil.nz/</a>>: 43906, <a href="http://net.nz" rel="noreferrer" target="_blank">net.nz</a> <<a href="http://net.nz/" rel="noreferrer" target="_blank">http://net.nz/</a>>: 25105, <a href="http://org.nz" rel="noreferrer" target="_blank">org.nz</a> <<a href="http://org.nz/" rel="noreferrer" target="_blank">http://org.nz/</a>>:<br>
> 24626, <a href="http://parliament.nz" rel="noreferrer" target="_blank">parliament.nz</a> <<a href="http://parliament.nz/" rel="noreferrer" target="_blank">http://parliament.nz/</a>>: 49424, <a href="http://school.nz" rel="noreferrer" target="_blank">school.nz</a> <<a href="http://school.nz/" rel="noreferrer" target="_blank">http://school.nz/</a>>: 27382<br>
<br>
Keytags are not a safe way to identify keys, as evidenced by .ru's recent incident [1].<br>
<br>
Suggesting to share more unique identifiers in the future (e.g., DS records), to prevent similar mix-ups.<br>
<br>
[1]: <a href="https://lists.dns-oarc.net/pipermail/dns-operations/2024-January/022406.html" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/pipermail/dns-operations/2024-January/022406.html</a><br>
<br>
Best,<br>
Peter<br>
<br>
-- <br>
Like our community service? 💛<br>
Please consider donating at<br>
<br>
<a href="https://desec.io/" rel="noreferrer" target="_blank">https://desec.io/</a><br>
<br>
deSEC e.V.<br>
Kyffhäuserstr. 5<br>
10781 Berlin<br>
Germany<br>
<br>
Vorstandsvorsitz: Nils Wisiol<br>
Registergericht: AG Berlin (Charlottenburg) VR 37525<br>
</blockquote></div></div>