Hi Naela
#3 I think what I was suggesting is there should be a way of ensuring there is a “churn” of TCR’s so that a minimum amount of new people are added and retired each year (Maybe a maximum term before
you have to retire for a period). That way we lessen the danger of their being no new eyes in that set of people. I do appreciate however there are probably only a limited amount of people who want to be involved in this role and so maybe this could also include
re-appointment of old TCR’s when they have been fallow ☺ for a year or two.
Brett
--
Brett Carr
Manager DNS and Network Engineering
Nominet UK
From:
Naela Sarras <naela.sarras@iana.org>
Date: Friday, 17 April 2020 at 21:49
To: Brett Carr <brett.carr@nominet.uk>, "icann-csc@icann.org" <ICANN-CSC@icann.org>
Subject: Re: [Ext] Re: [ICANN-CSC] Action Item - Proposed KPIs for KSK performance
Hi Brett,
I will add the suggestion below to the document we started and look into them further before our next check-in on this issue in July.
For #1, I need to discuss with Kim what is there to track or assess (if any) in terms of the ZSK operator.
For #2, yes we should find a way to keep the CSC informed about this and as the discussions are finalized,
For #3, the CBO team maintains the following webpage on the Current and retired TCRs
https://www.iana.org/dnssec/tcrs. The page lists when the TCRs were added to the pool including the backup ones. It also lists the retired TCRs. Are you saying that perhaps when a change is made to this list that
it gets pointed out to the CSC?
Best regards,
Naela
Naela
Sarras
Director,
IANA Operations
ICANN
From:
Brett Carr <brett.carr@nominet.uk>
Date: Wednesday, April 15, 2020 at 11:37 AM
To: Naela Sarras <naela.sarras@iana.org>, "icann-csc@icann.org" <ICANN-CSC@icann.org>
Subject: [Ext] Re: [ICANN-CSC] Action Item - Proposed KPIs for KSK performance
Thanks Naela,
As mentioned this is a great starting point.
Just to get some additional suggestions on the record for when we do pick this up again.
1.
I wonder If there is something we can track/assess in relation to the management IANA do of the ZSK Operator.
2.
When the discussions have concluded on how often the KSK should be rolled we should track that activity.
3.
I’d also like to suggest we track the TCR Churn, as a lot of the management and monitoring is done by the TCRs I think it’s important that new TCRs are regularly added and long term TCRs are retired.
Brett
--
Brett Carr
Manager DNS and Network Engineering
Nominet UK
From:
ICANN-CSC <icann-csc-bounces@icann.org> on behalf of Naela Sarras <naela.sarras@iana.org>
Date: Thursday, 2 April 2020 at 17:31
To: "icann-csc@icann.org" <icann-csc@icann.org>
Subject: [ICANN-CSC] Action Item - Proposed KPIs for KSK performance
Dear CSC,
During the March 2020 CSC meeting, Kim Davies gave a presentation on IANA’s role in managing the Root Key Signing Key (KSK). I have attached the presentation again for your reference if needed.
Following the presentation and discussion, we were tasked with an action item to come up with possible key performance indicators to monitor performance of the KSK.
Please find attached a document regarding with proposed measurements for CSC consideration.
We look forward to discussing the attached with you.
Best regards,
Naela
Sarras
Director,
IANA Operations
ICANN