<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><title>ICANN News Alert</title><style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Cambria;
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
h2
        {mso-style-priority:9;
        mso-style-link:"Heading 2 Char";
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:18.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"Balloon Text Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Tahoma","sans-serif";}
span.Heading2Char
        {mso-style-name:"Heading 2 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 2";
        font-family:"Cambria","serif";
        color:#4F81BD;
        font-weight:bold;}
p.dark, li.dark, div.dark
        {mso-style-name:dark;
        mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.medium, li.medium, div.medium
        {mso-style-name:medium;
        mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.light, li.light, div.light
        {mso-style-name:light;
        mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.dark1, li.dark1, div.dark1
        {mso-style-name:dark1;
        mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        background:#DEDEDE;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.medium1, li.medium1, div.medium1
        {mso-style-name:medium1;
        mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        background:#EFEFEF;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.light1, li.light1, div.light1
        {mso-style-name:light1;
        mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        background:#F8F8F8;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
span.EmailStyle25
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.BalloonTextChar
        {mso-style-name:"Balloon Text Char";
        mso-style-priority:99;
        mso-style-link:"Balloon Text";
        font-family:"Tahoma","sans-serif";}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>FYI… This is of utmost importance for those who have DNSSEC as part of their technical infrastructure.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Fahd Batayneh<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>ICANN<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Sent:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Saturday, July 23, 2016 12:46 AM<br><b>Subject:</b> ICANN News Alert -- ICANN Publishes Plans for Upcoming Key Signing Key Rollover<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div style='border:solid #CCCCCC 1.0pt;padding:8.0pt 8.0pt 8.0pt 8.0pt'><div><p class=MsoNormal style='text-align:justify'><a href="http://www.icann.org/"><span style='font-family:"Arial","sans-serif";text-decoration:none'><img border=0 width=94 height=94 id="_x0000_i1026" src="cid:image001.jpg@01D1E505.D3828AC0" alt=ICANN></span></a><span style='font-family:"Arial","sans-serif"'><o:p></o:p></span></p><h2 style='text-align:justify'><span style='font-family:"Arial","sans-serif"'>News Alert<o:p></o:p></span></h2><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;text-align:justify'><span style='font-family:"Arial","sans-serif"'><a href="https://www.icann.org/news/announcement-2016-07-22-en">https://www.icann.org/news/announcement-2016-07-22-en</a><o:p></o:p></span></p><div style='margin-top:15.0pt'><div class=MsoNormal align=center style='text-align:center'><span style='font-family:"Arial","sans-serif"'><hr size=2 width="100%" align=center></span></div></div><h2 style='margin-bottom:0in;margin-bottom:.0001pt;text-align:justify'><span style='font-family:"Arial","sans-serif"'>ICANN Publishes Plans for Upcoming Key Signing Key Rollover<o:p></o:p></span></h2><p style='text-align:justify'><span style='font-family:"Arial","sans-serif"'>22 July 2016<o:p></o:p></span></p><p style='text-align:justify'><span style='font-family:"Arial","sans-serif"'>ICANN today published plans outlining the operational processes required to change or "roll" the Root Zone Key Signing Key (KSK). The plans can be found <a href="https://www.icann.org/resources/pages/ksk-rollover#operational-plans">here</a>.<o:p></o:p></span></p><p style='text-align:justify'><span style='font-family:"Arial","sans-serif"'>The KSK is a cryptographic public-private key pair, the public portion of which serves as the trusted starting point for Domain Name System Security Extensions (DNSSEC) validation. ICANN, in its role as the IANA Functions Operator, will change the current KSK which was originally created via processes defined in cooperation with the other Root Zone Management Partners: Verisign, who acted as the Root Zone Maintainer, and the U.S. Department of Commerce's National Telecommunications and Information Administration (NTIA), as the Root Zone Administrator.<o:p></o:p></span></p><p style='text-align:justify'><span style='font-family:"Arial","sans-serif"'>The rollover plans detail implementation, monitoring, testing, and contingency processes designed to maintain operational stability and minimize end-user impact of the KSK rollover. The Root Zone Management Partners developed the plans that incorporate the Root Zone KSK Rollover <a href="https://www.iana.org/reports/2016/root-ksk-rollover-design-20160307.pdf">Design Team recommendations</a> [PDF, 1.01 MB].<o:p></o:p></span></p><p style='text-align:justify'><span style='font-family:"Arial","sans-serif"'>For more information about the plans and operational processes involved in the KSK rollover, read this <a href="https://www.icann.org/news/blog/dnssec-rolling-the-root-zone-key-signing-key">blog</a> from ICANN's Chief Technology Officer or access the <a href="https://www.icann.org/resources/pages/ksk-rollover">Root Zone KSK Rollover page</a>.<o:p></o:p></span></p></div></div></div></body></html>