[ksk-rollover] Revoked KSK-2010 now gone [was: Increased DNSKEY queries to the root servers since the KSK-2010 revocation]

Chris Thompson cet1 at cam.ac.uk
Fri Mar 22 16:54:03 UTC 2019

I see the revoked KSK-2010 has gone from the root servers on schedule
(as of SOA serial 2019032200).

It should be interesting to see whether the DNSKEY query rate to the
root servers (1) increases even more (2) falls off now (3) stays much
the same. That might give us a whole 1.58 bits of clue as to the cause
of the increase in the first place... :-)

Chris Thompson
Email: cet1 at cam.ac.uk

More information about the ksk-rollover mailing list