DevHeads.net

Reminder DNSSEC Root KSK roll today

In case you've not seen this many other places, just a friendly
reminder that ICANN is rolling the DNSSEC root KSK today. Make
sure your resolver (if it is validating) is ready. If you're
forwarding queries to an upstream resolver, you might also check
that the upstream is ready.

Comments

Re: Reminder DNSSEC Root KSK roll today

By Viktor Dukhovni at 10/11/2018 - 12:40

The new root zone is now live, with the DNSKEY RRset signed with
KSK2017 (id 20326), rather than KSK2010 (id 19036):

Before: <a href="http://dnsviz.net/d/root/W79zYQ/dnssec/" title="http://dnsviz.net/d/root/W79zYQ/dnssec/">http://dnsviz.net/d/root/W79zYQ/dnssec/</a>
During: <a href="http://dnsviz.net/d/root/W79zmg/dnssec/" title="http://dnsviz.net/d/root/W79zmg/dnssec/">http://dnsviz.net/d/root/W79zmg/dnssec/</a>
After: <a href="http://dnsviz.net/d/root/W790GQ/dnssec/" title="http://dnsviz.net/d/root/W790GQ/dnssec/">http://dnsviz.net/d/root/W790GQ/dnssec/</a>

As cached data expires, this should make its way into all working
caches over the next day or two.