Steve, Thanks for the kind words. You are certainly correct about the amount of preparation. It may not be obvious to everyone, but this involved a lot of cooperation and coordination with our colleagues at ICANN and IANA, for which we are very appreciative. The timing with the IANA transition added a little extra excitement.
Now we look forward to further cooperation on the KSK rollover! DW > On Oct 1, 2016, at 3:29 PM, Steve Crocker <[email protected]> wrote: > > Duane, et al, > > Congratulations. I know there has been a tremendous amount of preparation > for this step. Glad to see it paid off. > > It’s particularly nice that this very important step took place in tandem > with the sunset of the IANA contract and hence the completion of the > Transition, and that neither interfered with the other. > > Cheers, > > Steve > >> On Oct 1, 2016, at 9:36 AM, Wessels, Duane <[email protected]> wrote: >> >> I'm pleased to announce that this change is now complete. As of 13:34 UTC >> on October 1, 2016 the root zone has been signed and published with a >> 2048-bit ZSK. Please contact myself of Verisign customer service >> ([email protected]) if you observe any problems related to this change. >> >> Duane W. >> >>> On Sep 29, 2016, at 11:15 AM, Wessels, Duane <[email protected]> wrote: >>> >>> A quick update on this change: A 2048-bit ZSK has been pre-published in the >>> root zone as of September 20. We are not aware of any issues related to >>> the appearance of the larger key. >>> >>> In less than 48 hours we will being publishing root zones signed with the >>> 2048-bit ZSK. I will send another note once that has happened. If you >>> observe any problems related to this change, please contact Verisign's >>> customer service at [email protected]. >>> >>> Duane W. >>> >>>> On Jul 28, 2016, at 3:37 PM, Wessels, Duane <[email protected]> wrote: >>>> >>>> As you may know, Verisign, in its role as the Root Zone Maintainer >>>> is also the operator of the root zone Zone Signing Key (ZSK). Later >>>> this year, we will increase the size of the ZSK from 1024-bits to >>>> 2048-bits. >>>> >>>> The root zone ZSK is normally rolled every calendar quarter, as per >>>> our “DNSSEC Practice Statement for the Root Zone ZSK operator.”[1] >>>> The ZSK public keys are signed at quarterly key signing ceremonies >>>> by ICANN in its role as the IANA Functions Operator. >>>> >>>> On September 20, 2016 the 2048-bit ZSK will be pre-published in the >>>> root zone, following the standard ZSK rollover procedure. We intend >>>> to begin publishing root zones signed with the first 2048-bit ZSK >>>> on October 1, 2016. >>>> >>>> Some details of the ZSK size transition have recently been presented >>>> at the DNS-OARC, NANOG, RIPE, ICANN, and IETF meetings.[2] If you >>>> have any questions or concerns, please feel free to contact us at >>>> [email protected]. >>>> >>>> Please feel free to forward this message to anyone who might not have >>>> seen it here. >>>> >>>> [1] https://www.verisign.com/assets/dps-zsk-operator-1532.pdf >>>> [2] >>>> https://ripe72.ripe.net/wp-content/uploads/presentations/168-verisign-zsk-change.pdf >>>> >>> >> >
