<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">All,<div class=""><br class=""></div><div class="">Here’s this week's update on algorithm roll for .ORG:<br class=""><br class=""><div class=""><ul class="MailOutline"><li class="">The old algorithm 7 KSK record has been removed from the DNSKEY RRSet</li><li class="">.The DNSKEY RRSet is no longer signed by the algorithm 7 KSK.</li></ul></div><div class="">.</div>Referring to Figure 8 in <a href="https://tools.ietf.org/html/rfc6781#section-4.1.4" class="">RFC 6781</a>, .ORG was moved from “new DS” to “DNSKEY Removal” on Thursday, Oct 08 2020, and we are holding down.</div><div class=""><br class=""></div><div class="">We have noticed that the ZSK-based signature on the DNSKEY RRSet has re-emerged - we will address that next week, before the next zone re-sign.<br class=""><br class=""><div class="">Next week, we will remove the old algorithm 7 ZSK (and that spurious RRSIG). The following week, we will complete the algorithm roll with the removal of the algorithm 7 based zone signatures.</div><div class=""><br class=""></div>Have a great weekend!<br class=""><br class="">Best,<br class="">-Howard</div></body></html>