[ksk-rollover] [Ext] Re: First Root KSK Rollover Successfully Completed

Geoff Huston gih at apnic.net
Wed Oct 17 03:51:07 UTC 2018

That phase may merit some monitoring, as it the largest response to a
root zone DNSKEY query and we are aware that some resolvers fail
when the response gets this large.

see http://www.potaroo.net/ispcol/2017-08/xtn-hdrs.html and
http://www.potaroo.net/ispcol/2016-11/rootstars.html for details,
if you are interested.


> On 16 Oct 2018, at 4:37 pm, Edward Lewis <edward.lewis at icann.org> wrote:
> On 10/16/18, 16:16, "Chris Thompson" <cet1 at hermes.cam.ac.uk on behalf of cet1 at cam.ac.uk> wrote:
>    Just for clarification: does this mean that the plan is to publish a
>    keyset with KSK-2010 revoked *in* 2019-Q1 (from 11 January, as [1]
>    suggests), or that it will be *generated* during the key ceremony in
>    2019-Q1, and thus published in 2019-Q2 (presumably then from 11 April)?
> The plan is to publish a revocation of KSK-2010 on 11 January 2019.  The scheduled date for the KSK Ceremony (#35) that will produce that DNSKEY set is 15 November 2018.
> _______________________________________________
> ksk-rollover mailing list
> ksk-rollover at icann.org
> https://mm.icann.org/mailman/listinfo/ksk-rollover

More information about the ksk-rollover mailing list