<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style>body{font-family:Helvetica,Arial;font-size:13px}</style>
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">
On January 5, 2018 at 3:28:36 PM, S Moonesamy (<a href="mailto:sm+icann@elandsys.com">sm+icann@elandsys.com</a>) wrote:</div>
<div>
<blockquote type="cite" class="clean_bq" style="font-family: Helvetica, Arial; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">
<span>
<div>
<div></div>
<div>"Each RZ KSK will be scheduled to be rolled over through a key<span class="Apple-converted-space"> </span><br>
ceremony as required, or after 5 years of operation."<span class="Apple-converted-space"> </span></div>
</div>
</span></blockquote>
</div>
<p>Yes. But I’m still not seeing where 2020 comes in. All the above is saying is that the 2010 KSK was in a position to be rolled after 2015. </p>
<div>
<div>
<div>
<div>
<div>
<blockquote type="cite" class="clean_bq" style="font-family: Helvetica, Arial; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">
<span>
<div>
<div>The discussion on this mailing list has been <br>
about trust and uncertainty.<span class="Apple-converted-space"> </span></div>
</div>
</span></blockquote>
</div>
<p>What we’re looking for is some direction from the community on how to determine an "agreed understanding of when the rollover has affected operational stability beyond a reasonable boundary”.</p>
<div>
<blockquote type="cite" class="clean_bq" style="font-family: Helvetica, Arial; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">
<span>
<div>
<div>Is the potential<span class="Apple-converted-space"> </span><br>
negative impact mentioned above about the "4% of<span class="Apple-converted-space"> </span><br>
the approximately 12,000 DNSSEC-validating<span class="Apple-converted-space"> </span><br>
resolvers"?<span class="Apple-converted-space"> </span></div>
</div>
</span></blockquote>
</div>
</div>
<p>Sorry, where are you getting your numbers?</p>
<div>
<blockquote type="cite" class="clean_bq" style="font-family: Helvetica, Arial; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">
<span>
<div>
<div>If so, has there been any discussion about the data? </div>
</div>
</span></blockquote>
</div>
</div>
</div>
<p>To be clear, we’re now seeing about 8% of the RFC 8145-reporting resolvers (which is, of course, a subset of all validating resolvers) indicating they’re configured for only KSK-2010. The issue is that we have no good idea of figuring out how many end users
that percentage is representing and what the implications of breaking resolution for those end users will be.</p>
<p>Regards,</p>
<p>-drc</p>
<p><br>
</p>
</div>
</body>
</html>