nanog mailing list archives

Reminder: New KSK Publication in DNS Root Zone


From: Andres Pavez <andres.pavez () iana org>
Date: Tue, 7 Jan 2025 19:39:55 +0000

This is a reminder that the new Key Signing Key (KSK) will be published in the DNS root zone starting January 11 at 
00:00:00 UTC.

This will start the process of adoption of this trust anchor in RFC 5011 aware resolvers. We encourage operators to pay 
attention during this process to monitor for any unexpected consequences. 

Publishing the KSK is part of the process of ensuring widespread adoption of the KSK prior to its use in signing, 
currently scheduled for October 2026.

For more details, please visit: https://www.iana.org/dnssec/files 

Thanks,
-- 
Andres Pavez 
Cryptographic Key Manager 



Attachment: smime.p7s
Description:


Current thread: