[menog] [ICANN News Alert] ICANN Publishes Plans for Upcoming Key Signing Key Rollover

[Fahd Batayneh]

FYI… This is of utmost importance for those who have DNSSEC as part of their technical infrastructure.

 

Fahd Batayneh

ICANN

 

Sent: Saturday, July 23, 2016 12:46 AM
Subject: ICANN News Alert -- ICANN Publishes Plans for Upcoming Key Signing Key Rollover

 

 <http://www.icann.org/> ICANN


News Alert


https://www.icann.org/news/announcement-2016-07-22-en

  _____  


ICANN Publishes Plans for Upcoming Key Signing Key Rollover


22 July 2016

ICANN today published plans outlining the operational processes required to change or "roll" the Root Zone Key Signing Key (KSK). The plans can be found here <https://www.icann.org/resources/pages/ksk-rollover#operational-plans> .

The KSK is a cryptographic public-private key pair, the public portion of which serves as the trusted starting point for Domain Name System Security Extensions (DNSSEC) validation. ICANN, in its role as the IANA Functions Operator, will change the current KSK which was originally created via processes defined in cooperation with the other Root Zone Management Partners: Verisign, who acted as the Root Zone Maintainer, and the U.S. Department of Commerce's National Telecommunications and Information Administration (NTIA), as the Root Zone Administrator.

The rollover plans detail implementation, monitoring, testing, and contingency processes designed to maintain operational stability and minimize end-user impact of the KSK rollover. The Root Zone Management Partners developed the plans that incorporate the Root Zone KSK Rollover Design Team recommendations <https://www.iana.org/reports/2016/root-ksk-rollover-design-20160307.pdf>  [PDF, 1.01 MB].

For more information about the plans and operational processes involved in the KSK rollover, read this blog <https://www.icann.org/news/blog/dnssec-rolling-the-root-zone-key-signing-key>  from ICANN's Chief Technology Officer or access the Root Zone KSK Rollover page <https://www.icann.org/resources/pages/ksk-rollover> .

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.menog.org/pipermail/menog/attachments/20160723/2c6be3b7/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 9517 bytes
Desc: not available
Url : http://lists.menog.org/pipermail/menog/attachments/20160723/2c6be3b7/attachment-0001.jpe 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5543 bytes
Desc: not available
Url : http://lists.menog.org/pipermail/menog/attachments/20160723/2c6be3b7/attachment-0001.bin