[ksk-rollover] Revoked KSK-2010 now gone [was: Increased DNSKEY queries to the root servers since the KSK-2010 revocation]

Eric Osterweil lists at osterweil.net
Fri Mar 22 21:26:47 UTC 2019



> On Mar 22, 2019, at 4:45 PM, Dan York <york at isoc.org> wrote:
> 
> 
> 
>> On Mar 22, 2019, at 1:45 PM, Ray Bellis <ray at isc.org> wrote:
>> 
>> On 22/03/2019 17:12, Matt Larson wrote:
>> 
>>> The root zone without KSK-2010 went out ~1440 UTC. We've already seen a massive drop in DNSKEY queries from everywhere we have data. Note the graph below.
>> 
>> I'm seeing the same on our F-root nodes - a 95% reduction on the volume seen a couple of days ago.
> 
> 
> Do we have an understanding of WHY we are seeing the massive drop in volume?  (Or why we saw the massive volume in the first place?)
> 
> Just curious,

+1



More information about the ksk-rollover mailing list