- ksk-rollover - lists.icann.org

The root KSK roll has occurred
by Matt Larson Oct. 11, 2018

Oct. 11, 2018

On behalf of the root zone management partners (ICANN and Verisign), I would like to report that the root KSK rollover occurred at 1600 UTC today, 11 October, with the publication of the root zone with serial number 2018101100. For the 48 hours after the rollover, we will be monitoring several mailing lists, including this one, so please reply here with any issues or concerns. Matt -- Matt Larson, VP of Research ICANN Office of the CTO

2 1

Reporting - Root KSK Rollover
by Jacques Latour Oct. 11, 2018

Oct. 11, 2018

Hi all, If we notice any outages perhaps we should notify the outage mailing list @ outages(a)outages.org along with the resolution path. Good luck! Jacques

18 20

What KSK rollover methodology will be used today?
by Suhayb Alghutaymil Oct. 11, 2018

Oct. 11, 2018

Hey, everyone Does anyone know what is the method for changing the KSK rollover today? I have tried to look for it in ICNN documents but I unfortunately I could not find it.Also I would appreciate it if someone can send a link for ZSK/KSK rollover future timeline for root zone. Best wishes, Suhayb Alghutaymil

4 3

FYI - recent posts and articles about the Root KSK Rollover
by Dan York Oct. 6, 2018

Oct. 6, 2018

FYI, beyond what is on https://www.icann.org/kskroll I’ve seen the following posts / articles go out related to next week’s KSK roll - I thought I would share these in case others want to share them out in social media or other channels: Red Hat: (Paul Wouters) https://www.redhat.com/en/blog/what-you-need-know-about-first-ever-dnssec-r… Internet Society: (me) https://www.internetsociety.org/blog/2018/10/are-you-ready-how-to-prepare-f… CircleID: (Adiel Akplogan, ICANN) http://www.circleid.com/posts/20180924_the_root_ksk_rollover_what_does_it_m… ISC2 “Operational Notification”: https://kb.isc.org/docs/aa-01529 US-CERT alert: https://www.us-cert.gov/ncas/current-activity/2018/09/27/DNSSEC-Key-Signing… Singapore CERT: https://www.csa.gov.sg/singcert/news/advisories-alerts/singcert-technical-a… Suse: https://www.suse.com/c/dnssec-root-zone-ksk-rollover-11th-of-october/ (fun image of an anchor!) SIDN (in Dutch): https://www.sidnlabs.nl/a/weblog/ksk-key-roll-last-call I know from Jacques Latour that CIRA also sent out a media briefing to Canadian media sites. I also plan to cross-post mine over to CircleID later today. I’ve seen some of these articles on media sites: https://www.networkworld.com/article/3305070/internet/icann-sets-plan-to-re… https://hub.packtpub.com/redhat-shares-what-to-expect-from-next-weeks-first… https://mybroadband.co.za/news/internet/277299-how-the-dns-key-change-will-… I’m sure I missed some posts and articles that are out there… but just thought I’d share these. Dan -- Dan York Director, Content & Web Strategy, Internet Society york(a)isoc.org<mailto:york@isoc.org> +1-802-735-1624 Jabber: york(a)jabber.isoc.org<mailto:york@jabber.isoc.org> Skype: danyork http://twitter.com/danyork http://www.internetsociety.org/

2 1

Informal discussion about KSK rollovers at IETF 103 in Bangkok
by Paul Hoffman Oct. 4, 2018

Oct. 4, 2018

Greetings again. For those of you going to the IETF 103 meeting in Bangkok next month, you may have heard that there are no WG meetings on Friday, but people can reserve rooms for free-form discussions. I have reserved one of the rooms from 0900 to 1000 local time for informal discussion about future ideas for the KSK. There will also be such a discussion at the DNS-OARC meeting in a few weeks, but there probably will be different people at the two meetings. Having preliminary discussions about what people are thinking for how they want the KSK handled after this rollover is probably a good way to get ideas flowing in the larger community. I'll let this list know more about whether there can be remote participation and so on. --Paul Hoffman

1 0

ICANN board meeting result and the Current status of KSK-Rollover
by Ben Lee Sept. 26, 2018

Sept. 26, 2018

I would like to check for the latest status on ICANN root KSK rollover. Is it right the ICANN Board has discussed and approved the current plan on 16 Sep 2018? Does the root KSK rollover is now confirmed to be 11 Oct 2018? Thank you. Best regards, Ben

26 53

DITL Data Capture during KSK Roll
by Matthew Pounsett Sept. 21, 2018

Sept. 21, 2018

DNS-OARC periodically runs Day in the Life of the Internet (DITL) data capture events where major DNS infrastructure operators including root server operators, TLD operators, and some recursive infrastructure operators, all collect query traffic over the same 48 hour period. The packet captures from all of these sources are collected together and made available to researchers for the purpose of comparing DNS activity over long periods. OARC has DITL collection data going back to 2006. This year OARC will be running an extra DITL collection event during the root KSK roll. For this extra event we are inviting root server operators and operators of large recursive infrastructures to participate. Details of a test run and the actual event will be posted to the DITL mailing list midweek next week. Anyone intending to participate who is not on that list should subscribe. Please note that the DITL mailing list is a closed list, not open to spectators. All members of the list must be participating in DITL data collection events. For subscription information, please see <https://lists.dns-oarc.net/mailman/listinfo/ditl>. Matt Pounsett DNS-OARC Systems Engineering

1 0

No information in mainstream press, yet
by Rene 'Renne' Bartsch, B.Sc. Informatics Sept. 20, 2018

Sept. 20, 2018

Hi, I haven't found any information about the KSK-rollover in mainstream press, yet. So I suggest the ICANN actively contacts mainstream press hubs like AP, AFP, dpa, Reuters, etc. A list can be found at https://en.wikipedia.org/wiki/List_of_news_agencies. Regards, Renne

1 0

Updated version of "What To Expect During the Root KSK Rollover"
by Paul Hoffman Sept. 19, 2018

Sept. 19, 2018

https://www.icann.org/en/system/files/files/ksk-rollover-expect-17sep18-en.… There is two updates, removing the bit about the Board decision (since it is done) and adding the expected time of 1600 UTC (because the operational partners have agreed on this). We know that many people, even those who have been in the technical community a long time, have a misunderstanding of some of the topics, so we want to get this document out to as wide of a population as we can before October 11. If you have any corrections to the document, by all means let me know. --Paul Hoffman

1 0

Size of new keys?
by Rene 'Renne' Bartsch, B.Sc. Informatics Sept. 19, 2018

Sept. 19, 2018

Hi, how many bits will the new keys have? What's the smallest bit size of any key (ZSK, KSK, ...) in use after a successful rollover? Regards, Renne

3 2