[ksk-rollover] Revoked KSK-2010 now gone [was: Increased DNSKEY queries to the root servers since the KSK-2010 revocation]

[Dan York]

> On Mar 22, 2019, at 1:45 PM, Ray Bellis <ray at isc.org> wrote:
> 
> On 22/03/2019 17:12, Matt Larson wrote:
> 
>> The root zone without KSK-2010 went out ~1440 UTC. We've already seen a massive drop in DNSKEY queries from everywhere we have data. Note the graph below.
> 
> I'm seeing the same on our F-root nodes - a 95% reduction on the volume seen a couple of days ago.


Do we have an understanding of WHY we are seeing the massive drop in volume?  (Or why we saw the massive volume in the first place?)

Just curious,
Dan

--
Dan York
Director of Web Strategy, Internet Society
york at isoc.org   +1-603-439-0024 
Jabber: york at jabber.isoc.org  Skype: danyork   http://twitter.com/danyork

http://www.internetsociety.org/