That phase may merit some monitoring, as it the largest response to a root zone DNSKEY query and we are aware that some resolvers fail when the response gets this large. see http://www.potaroo.net/ispcol/2017-08/xtn-hdrs.html and http://www.potaroo.net/ispcol/2016-11/rootstars.html for details, if you are interested. Geoff
On 16 Oct 2018, at 4:37 pm, Edward Lewis <edward.lewis@icann.org> wrote:
On 10/16/18, 16:16, "Chris Thompson" <cet1@hermes.cam.ac.uk on behalf of cet1@cam.ac.uk> wrote:
Just for clarification: does this mean that the plan is to publish a keyset with KSK-2010 revoked *in* 2019-Q1 (from 11 January, as [1] suggests), or that it will be *generated* during the key ceremony in 2019-Q1, and thus published in 2019-Q2 (presumably then from 11 April)?
The plan is to publish a revocation of KSK-2010 on 11 January 2019. The scheduled date for the KSK Ceremony (#35) that will produce that DNSKEY set is 15 November 2018.
_______________________________________________ ksk-rollover mailing list ksk-rollover@icann.org https://mm.icann.org/mailman/listinfo/ksk-rollover