<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">We support the "ksk-rollover-restart" plan and urge ICANN to proceed with the Root KSK Rollover on 11 October 2018.</div><br class="">As we stated in our comments in 2013 [ <a href="https://forum.icann.org/lists/comments-root-zone-consultation-08mar13/msg00010.html" class="">https://forum.icann.org/lists/comments-root-zone-consultation-08mar13/msg00010.html</a> ], we believe that this rollover of the Root KSK is critical to ensure the ongoing operational reliability of DNSSEC.<br class=""><br class="">We do understand and appreciate the concerns that caused the postponement from the original target date of 11 October 2017. While the deployment of RFC 8145 gave some insight into potential failure, it is not clear what the actual impact of a rollover is going to be. It is also not clear whether in a relatively short timescale - on the order of a year or less - the risk assessment will be better informed. That, with the continued risk of further ossification of the existing trust anchor, makes us continue to support an 'early rollover scenario'. <br class=""><br class="">We encourage ICANN and associated partners to continue further study of the RFC 8145 data to better understand the risks - but we believe that the plan should still move forward.<br class=""><br class="">We also encourage ICANN to continue to expand communication and outreach activities to help the community of network operators be prepared to address any issues on 11 October 2018. We will do what we can to assist in this communication and outreach - and encourage all others involved with DNSSEC to do what they can as well.<br class=""><br class="">We look forward to the successful Root KSK Rollover on 11 October 2018 - and to what lessons can be learned so that Root KSK Rollovers can potentially occur on a more regular basis.<br class=""><br class="">Regards,<br class="">Olaf Kolkman, Chief Internet Technology Officer.<br class="">Dan York, DNSSEC Program Coordinator<br class=""><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br class=""></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Internet Society<br class=""><a href="https://www.internetsociety.org/" class="">https://www.internetsociety.org/</a></div></div>
</div>
<br class=""></body></html>