We would like to announce the Proposal for Future Root Zone KSK Rollovers has 
been released for public comment and is available for review on the ICANN 
website:

https://www.icann.org/public-comments/proposal-future-rz-ksk-rollovers-2019-11-01-en

We have reviewed the feedback received from the community, and tailored a plan 
based upon community feedback, operational complexity, and lessons learned in 
the first KSK rollover projects which concluded recently.

From a high level perspective, the plan includes a three-year rollover 
interval, with a period of about two years in a standby state before the 
rollover and active phase of the KSK.

The three-year rollover strikes a responsible balance ensuring that procedures 
and software remain sufficiently agile to adopt new keys as they are 
commissioned, while not introducing too much operational complexity through 
overly-frequent changes to the KSK.  The standby period will allow a longer 
pre-publication and consequently allow for the new KSK’s earlier use if there 
is a need to perform an emergency rollover.

The public comment period is slated to close at the end of January. We 
encourage you to submit your feedback so we may integrate it into the final 
approach.

For those at the ICANN 66 meeting in Montreal this week, we will be presenting 
the proposal to the DNSSEC session being held later today.


Kim Davies
VP, IANA Services, ICANN
President, Public Technical Identifiers (PTI)
_______________________________________________
root-dnssec-announce mailing list
root-dnssec-announce@icann.org
https://mm.icann.org/mailman/listinfo/root-dnssec-announce

_______________________________________________
By submitting your personal data, you consent to the processing of your 
personal data for purposes of subscribing to this mailing list accordance with 
the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website 
Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman 
link above to change your membership status or configuration, including 
unsubscribing, setting digest-style delivery or disabling delivery altogether 
(e.g., for a vacation), and so on.

Reply via email to