[ksk-rollover] Current status of KSK-RollOver?

Chris Thompson cet1 at cam.ac.uk
Thu Aug 23 11:12:30 UTC 2018


On Aug 16 2018, Rene 'Renne' Bartsch asked:

>how are the chances to make the 10/11/2018 for the Root Zone KSK Rollover?

and I suppose we can take the ICANN documents referenced in Paul's Hoffman's
post today as part of an answer to that. 

Also the latest "Call for Participation" in ICANN 63 (20-25 October) includes
this nugget:

| 2. Post KSK Rollover
| Following the Root Key Rollover, we would like to bring together a panel of
| people who can talk about lessons learned from this KSK Rollover and lessons
| learned for the next time

which sounds almost hubristically confident. No mention of "or alternatively,
we will talk about why we had to back off yet again".

One thing mentioned in
https://www.icann.org/news/blog/minimal-user-impact-expected-from-root-zone-key-signing-key-ksk-rollover
from 18 July was

| Looking forward, the ICANN org will soon reach out to the 1,000 Internet
| Service Providers (ISPs) with the most active resolver traffic that suggests
| DNSSEC validation has been enabled in order to ensure they aware that the
| root KSK roll will occur on 11 October 2018. Those ISPs will also be surveyed
| on their preparation plans for the rollover, which may cause those resolver
| operators to become more aware of the KSK rollover.

It would certainly be interesting if ICANN could tell us how well that project
is going, confidentiality permitting.

-- 
Chris Thompson
Email: cet1 at cam.ac.uk


More information about the ksk-rollover mailing list