[afnog] Root Zone DNSSEC Deployment Technical Status Update

[Frank Habicht]

Hello Joe,

I want to say thanks to you and your team for making this happen. For
making the 'Net a better place. For working hard to make it a
"non-event" as it's been called.

There are many many small steps involved, probably more than we can
imagine, but I guess through this it will not be an (apparent, big, bad)
event. And I think the steps sum up to a (giant?) leap ;-)
Ie make a difference - even if not one the first day.

Thanks, and I think much of the quiet majority is with me.

And all the best for later today.

Frank


On 7/15/2010 1:12 AM (my time), Joe Abley wrote:
> Root Zone DNSSEC Deployment
> Technical Status Update 2010-07-14
> 
> This is the eleventh of a series of technical status updates intended
> to inform a technical audience on progress in signing the root zone
> of the DNS.
> 
> 
> RESOURCES
> 
> Details of the project, including documentation published to date,
> can be found at <http://www.root-dnssec.org/>.
> 
> We'd like to hear from you. If you have feedback for us, please
> send it to rootsign at icann.org.
> 
> 
> KSK CEREMONY 2 COMPLETE
> 
> The second KSK ceremony for the root zone was completed this week
> in El Segundo, CA, USA. The Ceremony Administrator was Mehmet Akcin.
> 
> The second production Key Signing Request (KSR) generated by VeriSign
> has now been processed by ICANN using the root zone KSK generated
> in KSK Ceremony 1, and the resulting Signed Key Response (SKR) has
> been accepted by VeriSign. This SKR contains signatures for Q4 2010,
> for use between 2010-10-01 and 2010-12-31.
> 
> Audit materials relating to both the first and second ceremonies
> will be published today at <http://www.iana.org/dnssec/>.
> 
> 
> FULL PRODUCTION SIGNED ROOT ZONE
> 
> The transition from Deliberately-Unvalidatable Root Zone (DURZ) to
> production signed root zone is scheduled take place on 2010-07-15
> within a maintenance window which begins at 1930 UTC and ends at
> 2330 UTC. This is the usual window for the generation and distribution
> of root zones with SOA serials ending in 01.
> 
> 
> PLANNED DEPLOYMENT SCHEDULE
> 
> Already completed:
> 
>   2010-01-27: L starts to serve DURZ
> 
>   2010-02-10: A starts to serve DURZ
> 
>   2010-03-03: M, I start to serve DURZ
> 
>   2010-03-24: D, K, E start to serve DURZ
> 
>   2010-04-14: B, H, C, G, F start to serve DURZ
> 
>   2010-05-05: J starts to serve DURZ
> 
>   2010-06-16: First Key Signing Key (KSK) Ceremony
> 
>   2010-07-12: Second Key Signing Key (KSK) Ceremony
> 
> To come:
> 
>   2010-07-15: Distribution of validatable, production, signed root
>     zone; publication of root zone trust anchor
> 
>   (Please note that this schedule is tentative and subject to change
>   based on testing results or other unforeseen factors.)
> 
> 
> _______________________________________________
> afnog mailing list
> http://afnog.org/mailman/listinfo/afnog