Re: Fw: Root Zone DNSSEC Deployment Technical Status Update

2010-07-18 Thread bmanning
On Sat, Jul 17, 2010 at 10:41:10AM -0400, Paul Wouters wrote: On Fri, 16 Jul 2010, Taral wrote: Neat, but not (yet) useful... only these TLDs have DS records: The rest will follow soon. And it is not that you had to stop those TLD trust anchors just now. actually, soon is a

Re: Fw: Root Zone DNSSEC Deployment Technical Status Update

2010-07-17 Thread Paul Wouters
On Fri, 16 Jul 2010, Taral wrote: Neat, but not (yet) useful... only these TLDs have DS records: The rest will follow soon. And it is not that you had to stop those TLD trust anchors just now. Several are using old SHA-1 hashes... old ? Paul

Re: Fw: Root Zone DNSSEC Deployment Technical Status Update

2010-07-17 Thread Taral
On Sat, Jul 17, 2010 at 7:41 AM, Paul Wouters p...@xelerance.com wrote: Several are using old SHA-1 hashes... old ? old in that they are explicitly not recommended by the latest specs I was looking at. -- Taral tar...@gmail.com Please let me know if there's any further trouble I can give

Fw: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Perry E. Metzger
The root zone has been signed, and the root zone trust anchor has been published. Begin forwarded message: Date: Fri, 16 Jul 2010 14:35:39 + From: Joe Abley joe.ab...@icann.org To: na...@nanog.org Subject: Root Zone DNSSEC Deployment Technical Status Update Root Zone DNSSEC Deployment

Re: Fw: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Thierry Moreau
Perry E. Metzger wrote: The root zone has been signed, and the root zone trust anchor has been published. That's a great achievement for the parties involved. It is also a significant step towards more trustworthy DNS data. I have been following this with attention from the perspective of

Re: Fw: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Taral
On Fri, Jul 16, 2010 at 7:47 AM, Perry E. Metzger pe...@piermont.com wrote: The root zone has been signed, and the root zone trust anchor has been published. Neat, but not (yet) useful... only these TLDs have DS records: bg. 172800 IN DS 46846 5 1