Hi Sylvain, I am actually not sure whether BIND 9 in Jessie already uses dns-root-data, so maybe same procedure will be needed for bind9 package.
Could you perhaps also check unbound? This is the most probable cause of the weird traffic with old key that DNS Root Operators see at root servers. Just make sure it contains only the new DNSKEY (2017) and not both. Thanks, Ondrej -- Ondřej Surý ond...@isc.org > On 14 May 2019, at 01:38, Sylvain Beucler <b...@beuc.net> wrote: > > Hi, > > On 13/05/2019 05:43, Ondřej Surý wrote: >> could you please update dns-root-data package in Jessie LTS to latest >> version from Unstable/Stretch? > > I'll backport it following dkg's stretch update. > > Besides setting up a bind9, anything we should test? > > Cheers! > Sylvain >