Source: monero Severity: important Tags: upstream Hi,
The DNS Root Key Signing Key (KSK) Rollover is scheduled for 11 October 2018 [1]. After this date, DNS query resolution will need to have the new key (KSK-2017) to perform DNSSEC validation. [1] https://www.icann.org/news/announcement-2018-08-22-en AFAICS, monero implements its own DNS resolver, and has the KSK-2010 built-in [2]: [2] https://sources.debian.org/src/monero/0.12.3.0%7Edfsg-1/src/common/dns_utils.cpp/#L104 Without the new key, monero users may encounter problems once the rollover occurs. Please, consider including the KSK-2017, already found in upstream source code [3]: [3] https://github.com/monero-project/monero/commit/5083614ffa84109fccd754ee5509b25030bec9a6 Best regards, -- Santiago
signature.asc
Description: PGP signature
