August 2017 - ksk-rollover - lists.icann.org

Observation on Large response issue during Yeti KSK rollover
by Davey Song(宋林健) Aug. 21, 2017

Aug. 21, 2017

Hi ICANN KSK rollover team, For your information, I have an observation on large response impacts during Yeti KSK rollover. Please check the article. http://yeti-dns.org/yeti/blog/2017/08/02/large-packet-impact-during-yeti-ksk -rollover.html Best regards, Davey

6 9

new root trust anchor confirmation
by Daisuke HIGASHI Aug. 17, 2017

Aug. 17, 2017

Is there any method to confirm that my validator has accepted new root KSK trust anchor and can actually validates with new TA before 11 Oct? Any test records signed with _only_ new KSK in root zone? Regards, -- Daisuke Higashi

9 13

Automated Updates (aka RFC 5011) add-hold for the new root zone KSK expires soon
by Edward Lewis Aug. 11, 2017

Aug. 11, 2017

Looking at my records, the new KSK appeared between 2017-07-11@1305UTC and 2017-07-11@1405UTC. (I run some probes at 5 minutes after the hour.) "30 Days later" means 10 August (not 11 August!). We are less than 24 hours away from that as I write this message (about 20 hours now).

7 7