[ksk-rollover] 答复: 答复: First Root KSK Rollover Successfully Completed

[Davey Song(宋林健)]

YouTube Outages !! Hope it have nothing to do with KSK rollover…  Waiting for the troubleshooting report. 

I have over reactions these days ; p 

Davey

> -----邮件原件-----
> 发件人: Edward Lewis [mailto:edward.lewis at icann.org]
> 发送时间: 2018年10月16日 20:52
> 收件人: Davey Song(宋林健); ksk-rollover at icann.org
> 主题: Re: [ksk-rollover] 答复: First Root KSK Rollover Successfully Completed
> 
> In general, reason for any service outage would need explanation by the service
> provider.  Service provisioning is so complicated (layers upon layers) that
> what's seen on the surface is hardly representative of what's inside.
> 
> A rule from years of developing monitoring scripts: It's one thing to detect and
> measure symptoms, it's an entirely different thing to make a diagnosis.
> 
> On 10/16/18, 11:50, "ksk-rollover on behalf of Davey Song(宋林健)"
> <ksk-rollover-bounces at icann.org on behalf of ljsong at biigroup.cn> wrote:
> 
>     I had several bounce mails today from my Gmail to IETF's mail. It's weird.
> 
>     	The response from the remote server was:
>     	550 5.7.1 mail w9G8HQ5a028992 from 2607:f8b0:4864:20::72a
> rejected by DCC
> 
>     The bounce may irrelevant with KSK. But an question came up to my mind
> that how can a user identify a failure caused by KSK rollover?
> 
>     Davey
> 
>     > -----邮件原件-----
>     > 发件人: ksk-rollover [mailto:ksk-rollover-bounces at icann.org] 代表
> Edward
>     > Lewis
>     > 发送时间: 2018年10月16日 0:08
>     > 收件人: ksk-rollover at icann.org
>     > 主题: [ksk-rollover] First Root KSK Rollover Successfully Completed
>     >
>     > LOS ANGELES – 15 October 2018 – The Internet Corporation for
> Assigned
>     > Names and Numbers (ICANN) has determined that the first-ever
> changing of
>     > the cryptographic key that helps protect the Domain Name System (DNS)
> has
>     > been completed with minimal disruption of the global Internet. It was
> the first
>     > time the key has been changed since it was first put in use in 2010.
>     >
>     > After evaluation of the available data, there does not appear to be a
> significant
>     > number of Internet end-users who have been persistently and negatively
>     > impacted by the changing of the key.
>     >
>     > The few issues that have arisen appear to have been quickly mitigated
> and
>     > none suggested a systemic failure that would approach the threshold (as
>     > defined by the ICANN community) to initiate a reversal of the roll. In that
>     > context, it appears the rollover to the new Key Signing Key, known as KSK
> 2017,
>     > has been a success.
>     >
>     > At this point, there are no indications it is necessary to back out of the
> rollover
>     > and ICANN will now proceed to the next step in the rollover process:
> revoking
>     > the old KSK, known as KSK 2010 during the next key ceremony in the first
>     > quarter of 2019.
>     >
>     > "This successful exercise of the infrastructure necessary to roll the root
> zone's
>     > key has demonstrated it is possible to update the key globally," said
> David
>     > Conrad, ICANN's Chief Technology Officer. "It also provided important
> insights
>     > that will help us with future key rolls,"
>     >
>     > The final decision to roll the root zone Key Signing Key (KSK) was made by
>     > ICANN President and CEO Göran Marby after reviewing the outcomes of
> the
>     > efforts of ICANN and others, particularly in the Domain Name System
> (DNS)
>     > technical community. These outcomes were the result of significant
> global
>     > outreach efforts, in consultation with the ICANN community, and after
>     > extensive analysis of available data.
>     >
>     > With the final approvals in place, ICANN implemented the 16 September
> 2018
>     > resolution of ICANN's Board. The resolution stated that the organization
> should
>     > proceed with its revised plans to change or "roll" the key for the DNS
> root on 11
>     > October 2018.
>     >
>     > To learn more about the Root KSK Rollover, visit its dedicated webpage
> and
>     > primary source of information:
> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.icann.org_kskroll
> &d=DwIGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=9G8-4P
> __AMgxNOQPiu7FkrImeieALKYtfGBE8UTuyg4&m=hR8Ybh82VHKrCdpbCDLsLiIo
> 6QN0R7Sqm8MrbrjJ5Gc&s=7uzxUy8X7d2fWg2RI1p-HLwS_hMD-qSirSRntreUm
> bE&e=
>     >
>     > About ICANN
>     > ICANN's mission is to help ensure a stable, secure, and unified global
> Internet.
>     > To reach another person on the Internet, you need to type an address –
> a name
>     > or a number – into your computer or other device. That address must be
>     > unique so computers know where to find each other. ICANN helps
> coordinate
>     > and support these unique identifiers across the world. ICANN was
> formed in
>     > 1998 as a not-for-profit public-benefit corporation with a community of
>     > participants from all over the world.
>     >
>     >
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_news_
> announcement-2D2018-2D10-2D15-2Den&d=DwIGaQ&c=FmY1u3PJp6wrcrwll3
> mSVzgfkbPSS6sJms7xcl4I5cM&r=9G8-4P__AMgxNOQPiu7FkrImeieALKYtfGBE8
> UTuyg4&m=hR8Ybh82VHKrCdpbCDLsLiIo6QN0R7Sqm8MrbrjJ5Gc&s=NB5ukP8
> 6kmmCUvoCcjaYNPgvyMKVzxI1qKGtpAitA54&e=
>     >
>     > _______________________________________________
>     > ksk-rollover mailing list
>     > ksk-rollover at icann.org
>     > https://mm.icann.org/mailman/listinfo/ksk-rollover
> 
> 
> 
>     _______________________________________________
>     ksk-rollover mailing list
>     ksk-rollover at icann.org
>     https://mm.icann.org/mailman/listinfo/ksk-rollover
>