[ksk-rollover] Now publishing updated RFC8145 graphs and IP addresses of resolvers reporting

Paul Hoffman paul.hoffman at icann.org
Wed May 16 20:11:03 UTC 2018


On May 15, 2018, at 12:57 PM, Matt Larson <matt.larson at icann.org> wrote:
> 
> We wanted to let everyone know that we've updated the graphs of RFC 8145 data we're receiving. In addition, as of today, we've also started publishing the list of individual addresses that are sending RFC 8145 data indicating they are configured with only KSK-2010 as a trust anchor. See this page for more information about both the graphs and the list of addresses:
> 
> https://urldefense.proofpoint.com/v2/url?u=http-3A__root-2Dtrust-2Danchor-2Dreports.research.icann.org&d=DwICAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=yvHk3BrvY-tKWGRmaFbQS1aHXNfQjC40fPfI5u1VsFs&m=Df3NP7hS8WyIEY9cxqHw2uu3scmxT8LxRrjdQnntLhg&s=pyF6uIDM9SHQyAcI-n3kdV0sKkDCnBe4D_rZO7YNKe8&e=
> 
> While the graphs show an "up and to right" trend in the number of sources reporting only KSK-2010, Wes Hardaker has done some excellent research and found what he believes is the source for many of these queries; more details are on that page, as well.

As a follow-up: many of you indicated interest in investigating those addresses. Could you tell us (either this list, or ICANN folks in private) what you find as you dive in to the data? It would help us coordinate our efforts in the time between now and October 11.

--Paul Hoffman


More information about the ksk-rollover mailing list