On Mon, Oct 14, 2019 at 6:34 PM Wessels, Duane via dns-operations <[email protected]> wrote: > All, > > Verisign is in the process of increasing the size and strength of > the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that > it operates. As part of this process, the ZSK for the .COM zone will > be increased in size from 1024 to 1280 bits. > > On October 10, 2019 the 1280 bit ZSK was pre-published in the .COM zone. > On October 15, we plan to sign the .COM zone with the 1280 bit ZSK. > On October 20, we plan to remove the old 1024 bit ZSK from the zone.
D'y'all have an updated ETA on step 3? > We do not anticipate any problems from this upgrade. In accordance > with our normal operating procedures we have a rollback process should > it become necessary to revert to the 1024 bit ZSK. > > DW -- Matt Nordhoff _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
