2018-10-11

Internet Root KSK Rollover, 'Rolling the Key' for the DNS Root Oct 11

If everything goes fine, you should not notice and your systems will all work as normal. However, if your DNS resolvers are not ready to use the new key, your users may not be able to reach many websites, send email, use social media or engage in other Internet activities ... It should be a "non-event" in that it will be "just another day on the Internet" --Dan York
 The Communications Regulatory Authority (CRA) has cautioned the public against misleading information circulating on social media platforms pertaining to an alleged “two-day Internet outage across the world.” The CRA clarified that on October 11, 2018, the Internet Corporation of Assigned Names and Numbers (ICANN) will change the cryptographic key that helps protect the Domain Name System (DNS) — the Internet’s address book--gulf-times.com.
Root KSK Rollover: ICANN Board approved (with dissent), to change or "roll" the key for the DNS root on 11 Oct 2018, first time the key has ever been changed--ICANN.org.
What To Expect During the Root KSK Rollover (pdf, updated 17 Sep 2018) embed below:

More info:

  • What you need to know about the first-ever DNSSEC root key rollover on October 11, 2018--redhat.com.
  • The Root KSK Rollover? What Does It Mean for Me?--circleid.com.
  • Operational Notification: KSK-2010 will be retired from the root zone, potentially affecting validating resolvers--kb.isc.org/docs/aa-01529
  • DNSSEC – Root Zone KSK Rollover--suse.com
  • [SingCERT] Technical Advisory on DNSSEC Root Zone Key Signing Key Rollover--csa.gov.sg
Operational Plans for the Root KSK Rollover | ICANN.org: the current operational plans for 2018 are:


feedback & comments via twitter @DomainMondo


DISCLAIMER

Domain Mondo posts: