[afnog] Root Zone DNSSEC Deployment Technical Status Update

[Joe Abley]

Root Zone DNSSEC Deployment
Technical Status Update 2010-06-09

This is the eighth of a series of technical status updates intended
to inform a technical audience on progress in signing the root zone
of the DNS.


RESOURCES

Details of the project, including documentation published to date,
can be found at <http://www.root-dnssec.org/>.

We'd like to hear from you. If you have feedback for us, please
send it to rootsign at icann.org.


PUBLIC NOTICE

The US Department of Commerce National Telecommunications and
Information Administration (NTIA) has issued a Public Notice regarding
the deployment of DNSSEC in the root zone.

  http://www.ntia.doc.gov/frnotices/2010/FR_DNSSEC_Notice_06092010.pdf

The Public Notice makes reference to the final report submitted to
NTIA by ICANN and VeriSign which contains a summary of the project
work to date together with a recommendation that full deployment
should proceed.

  http://www.ntia.doc.gov/reports/2010/DNSSEC_05282010.pdf

The Public Notice includes a public review period. Comments may be
submitted by postal mail, fax or e-mail before 2010-06-21.  Instructions
for the submission of comments are included in the Public Notice.


PLANNED DEPLOYMENT SCHEDULE

Already completed:

  2010-01-27: L starts to serve DURZ

  2010-02-10: A starts to serve DURZ

  2010-03-03: M, I start to serve DURZ

  2010-03-24: D, K, E start to serve DURZ

  2010-04-14: B, H, C, G, F start to serve DURZ

  2010-05-05: J starts to serve DURZ

To come:

  2010-06-16: First Key Signing Key (KSK) Ceremony

  2010-07-15: Distribution of validatable, production, signed root
    zone; publication of root zone trust anchor

  (Please note that this schedule is tentative and subject to change
  based on testing results or other unforeseen factors.)