<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style>body{font-family:Helvetica,Arial;font-size:13px}</style>
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">
Hi,</div>
<br>
<div id="bloop_sign_1515456655653206784" class="bloop_sign">On January 7, 2018 at 12:54:49 PM, S Moonesamy (<a href="mailto:sm+icann@elandsys.com">sm+icann@elandsys.com</a>) wrote:</div>
<div>
<blockquote type="cite" class="clean_bq" style="font-family: Helvetica, Arial; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">
<span>
<div>
<div></div>
<div>The first KSK was introduced in 2010. That statement is about doing<span class="Apple-converted-space"> </span><br>
a KSK after five years. I multiplied the duration by two, hence the year 2020.<span class="Apple-converted-space"> </span></div>
</div>
</span></blockquote>
</div>
<p>I don’t think the idea was that there would be a slot every 5 years and if we missed a slot, we’d have to wait until the next slot 5 years later (or, alternatively, that we’d have to accelerate the next roll to be less than 5 years if the roll took time).
I would presume that without further direction by the community, the next roll will occur 5 years after we put KSK-2017 into operation. The question here is when will we be putting KSK-2017 into operation.</p>
<div>
<div>
<blockquote type="cite" class="clean_bq" style="font-family: Helvetica, Arial; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">
<span>
<div>
<div>There was a discussion about the rollover in 2013. The delays since<span class="Apple-converted-space"> </span><br>
them could be interpreted as meaning that the KSK roll is<span class="Apple-converted-space"> </span><br>
indefinitely postponed. At some point there may be discussions about<span class="Apple-converted-space"> </span><br>
whether all this is reliable.<span class="Apple-converted-space"> </span></div>
</div>
</span></blockquote>
</div>
<p>We were on track to roll the KSK on 11 Oct 2017. We postponed the roll as a result of new information days before we were intending to move forward. Suggesting that this means an indefinite postponement seems a bit of a reach to me.</p>
<div>
<div>
<blockquote type="cite" class="clean_bq" style="font-family: Helvetica, Arial; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">
<span>
<div>
<div>The (8%) number is not meaningful if I cannot explain it in an easily<span class="Apple-converted-space"> </span><br>
understandable manner.<span class="Apple-converted-space"> </span></div>
</div>
</span></blockquote>
</div>
<p>To be clear: the 8% number reflects the percentage of resolvers reporting according to RFC 8145 that have only KSK-2010 configured and which presumably would be unable to validate if we roll the KSK. The meaning of this is that we have concrete data that
show a non-zero number of resolvers will fail, presumably impacting a non-zero number of end users. While this was suspected, prior to the RFC 8145 data, we did not have certainty. We still do not know how many end users will be impacted because we can’t tell
how many end users are behind the resolvers that are reporting KSK-2010 only. </p>
<div>
<div>
<div>
<blockquote type="cite" class="clean_bq" style="font-family: Helvetica, Arial; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">
<span>
<div>
<div>Would breaking resolution have an impact<span class="Apple-converted-space"> </span><br>
which is similar to the 2016 Dyn outage? Would it take down a<span class="Apple-converted-space"> </span><br>
significant part of the internet in a country?<span class="Apple-converted-space"> </span></div>
</div>
</span></blockquote>
</div>
<p>We do not know. </p>
<p>Regards,</p>
<p>-drc</p>
<div></div>
</div>
</div>
</div>
</div>
</body>
</html>