<div dir="auto"><div>I agree with Paul's comment. I forgot to share my comments on this to the RSSAC mailing list. It was sent a couple of days back. My comments are described below. <br><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">---------- Forwarded message ---------<br>From: <strong class="gmail_sendername" dir="auto">Dessalegn Yehuala</strong> <span dir="auto"><<a href="mailto:mequanint.yehuala@gmail.com">mequanint.yehuala@gmail.com</a>></span><br>Date: Thu, 12 Dec 2019, 16:54<br>Subject: Re: [RSSAC Caucus] INPUT REQUESTED: Proposal for Future Root Zone KSK Rollovers<br>To: Andrew McConachie <<a href="mailto:andrew.mcconachie@icann.org">andrew.mcconachie@icann.org</a>><br></div><br><br><div dir="ltr">Hi Andrew,<div><p class="MsoNormal" style="margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif">I have two comments to forward on the proposed future root
zone KSK rollovers:</p>
<p style="margin:0in 0in 0.0001pt 0.5in;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif">1.<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span>Section 2.4 (Rationale for rollover frequency)-
the rationale given is vague or at best subjective, no cost model or any other parameters
(based on challenges faced in previous KSK rollovers) have been used to justify
the tradeoffs that come along with making the rollover frequency to 3 years. Why
not for a longer rollover frequency like 4 years or 5 years?</p>
<p style="margin:0in 0in 8pt 0.5in;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif">2.<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span>Section 2.6 (Changes to key algorithm and
strength)- it only assumes on the current state of the strength of the current
cryptographic algorithm employed for the KSK (2048-bit RSA), there is no risk
mitigation identified in the event the current cryptographic algorithm discovered
to have some exploitable vulnerabilities. </p></div><div><br></div><div>Kind regards,</div><div>Dessalegn<br><div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 11, 2019 at 7:06 PM Andrew McConachie <<a href="mailto:andrew.mcconachie@icann.org" target="_blank" rel="noreferrer">andrew.mcconachie@icann.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
Dear RSSAC Caucus,
<div><br>
</div>
<div>A friendly reminder to send in any feedback by <b>December 15th</b>.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Andrew<br>
<div><br>
<blockquote type="cite">
<div>On Dec 3, 2019, at 22:49, Andrew McConachie <<a href="mailto:andrew.mcconachie@icann.org" target="_blank" rel="noreferrer">andrew.mcconachie@icann.org</a>> wrote:</div>
<br>
<div>
<div>
Dear RSSAC Caucus,
<div><br>
</div>
<div>The IANA has published a Proposal for Future Root Zone KSK Rollovers and is soliciting public comments on it.</div>
<div><<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_public-2Dcomments_proposal-2Dfuture-2Drz-2Dksk-2Drollovers-2D2019-2D11-2D01-2Den&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=KNEpS67O2txk54bIz-1lXP0tI5Rmtg88Ogwh6PVSGXJyTMuY0E2SHr70jrG3fGLJ&m=YoEr8VEKz6dca-SGMKWvE03nw_u3sPlsVD0NNpEPcHM&s=iSIeBJOqhJGp75k8Ljg2x9X2ytOJJS9p0ftdFWwR7q0&e=" target="_blank" rel="noreferrer">https://www.icann.org/public-comments/proposal-future-rz-ksk-rollovers-2019-11-01-en
[icann.org]</a>></div>
<div><br>
</div>
<div>The RSSAC wishes to solicit feedback from the Caucus to determine its response. Please review the proposal and if you have comments please send them to this list by
<b>December 15th</b>. Depending on the comments and discussion generated on this list the RSSAC may kick off a quick work party to draft input, or we may just continue using this list for development of the document. </div>
<div><br>
</div>
<div>The final deadline for input is January 31, 2020. So we don’t have too much time to get something ready.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Andrew</div>
</div>
_______________________________________________<br>
rssac-caucus mailing list<br>
<a href="mailto:rssac-caucus@icann.org" target="_blank" rel="noreferrer">rssac-caucus@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/rssac-caucus" target="_blank" rel="noreferrer">https://mm.icann.org/mailman/listinfo/rssac-caucus</a><br>
<br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_policy&d=DwICAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=KNEpS67O2txk54bIz-1lXP0tI5Rmtg88Ogwh6PVSGXJyTMuY0E2SHr70jrG3fGLJ&m=YoEr8VEKz6dca-SGMKWvE03nw_u3sPlsVD0NNpEPcHM&s=JiOXKxz9uWMyFvh-7EqqQeW9rC17QLtbvoxswWzxji8&e=" target="_blank" rel="noreferrer">https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_policy&d=DwICAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=KNEpS67O2txk54bIz-1lXP0tI5Rmtg88Ogwh6PVSGXJyTMuY0E2SHr70jrG3fGLJ&m=YoEr8VEKz6dca-SGMKWvE03nw_u3sPlsVD0NNpEPcHM&s=JiOXKxz9uWMyFvh-7EqqQeW9rC17QLtbvoxswWzxji8&e=</a>
) and the website Terms of Service (<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_tos&d=DwICAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=KNEpS67O2txk54bIz-1lXP0tI5Rmtg88Ogwh6PVSGXJyTMuY0E2SHr70jrG3fGLJ&m=YoEr8VEKz6dca-SGMKWvE03nw_u3sPlsVD0NNpEPcHM&s=DpILgk5e8_fzesfeVQHSo_hM4PrDwfeOV2xBsPzvacs&e=" target="_blank" rel="noreferrer">https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_tos&d=DwICAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=KNEpS67O2txk54bIz-1lXP0tI5Rmtg88Ogwh6PVSGXJyTMuY0E2SHr70jrG3fGLJ&m=YoEr8VEKz6dca-SGMKWvE03nw_u3sPlsVD0NNpEPcHM&s=DpILgk5e8_fzesfeVQHSo_hM4PrDwfeOV2xBsPzvacs&e=</a>
). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
rssac-caucus mailing list<br>
<a href="mailto:rssac-caucus@icann.org" target="_blank" rel="noreferrer">rssac-caucus@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/rssac-caucus" rel="noreferrer noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/rssac-caucus</a><br>
<br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" rel="noreferrer noreferrer" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" rel="noreferrer noreferrer" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</blockquote></div>
</div></div></div>