FYI…

 

For those interested in DNSSEC, the recommendations on DNSSEC Rook Zone KSK 
document might be of interest to you.

 

Fahd Batayneh

ICANN

 

Sent: Tuesday, March 08, 2016 10:56 PM
Subject: ICANN News Alert -- ICANN Announces Availability of DNSSEC Root Zone 
KSK Recommendations

 

 <http://www.icann.org/> ICANN


News Alert


https://www.icann.org/news/announcement-2016-03-08-en

  _____  


ICANN Announces Availability of DNSSEC Root Zone KSK Recommendations


8 March 2016

A design team consisting of seven independent DNS experts along with 
representatives from ICANN, Verisign, and NTIA has completed a report with 
recommendations for changing, also known as rolling, the DNSSEC root zone Key 
Signing Key (KSK). Rolling the KSK means generating a new cryptographic public 
and private key pair and distributing the new public component to parties 
including Internet service and other DNS resolver operators, DNS resolver 
software developers, integrators, and distributors. The KSK is used to 
cryptographically sign the Zone Signing Key which is used by Verisign as the 
Root Zone Maintainer to sign the root zone of the Internet's DNS. Obtaining the 
new key is essential to ensuring DNSSEC-signed domain names continue to 
validate following the rollover. The report is published here 
<https://www.iana.org/reports/2016/root-ksk-rollover-design-20160307.pdf>  
[PDF, 1 MB].

The KSK rollover operation is being planned by ICANN, in its role as the IANA 
Functions Operator, in cooperation with the other Root Zone Management (RZM) 
partners and will incorporate the design team recommendations in developing the 
operational KSK rollover plan. The RZM partners are Verisign as the Root Zone 
Maintainer and the US Department of Commerce's National Telecommunications and 
Information Administration (NTIA), as the Root Zone Administrator. The design 
team was composed of the following community volunteers:

*       Joe Abley, Snake Hill Labs/DyN, CA
*       Jaap Akkerhuis, NLNetLabs, NL
*       John Dickinson, Sinodun Internet Technologies, UK
*       Geoff Huston, APNIC, AU
*       Ondrej Sury, CZ.NIC, CZ
*       Paul Wouters, No Hats/Red Hat, NL
*       Yoshiro Yoneya, JPRS, JP

ICANN wishes to thank the design team for their efforts. The operational KSK 
rollover plan is anticipated to be completed by 1 July 2016.


About ICANN


ICANN's mission is to help ensure a stable, secure and unified global Internet. 
To reach another person on the Internet, you have to type an address into your 
computer - a name or a number. That address has to be unique so computers know 
where to find each other. ICANN helps coordinate and support these unique 
identifiers across the world. ICANN was formed in 1998 as a not-for-profit 
public-benefit corporation and a community with participants from all over the 
world. ICANN and its community help keep the Internet secure, stable and 
interoperable. It also promotes competition and develops policy for the 
top-level of the Internet's naming system and facilitates the use of other 
unique Internet identifiers.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Menog mailing list
[email protected]
http://lists.menog.org/mailman/listinfo/menog

Reply via email to