<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="ICANN News Alert">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<title>ICANN News Alert</title>
<style><!--
/* Font Definitions */
@font-face
{font-family:Arial;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Courier New";
panose-1:2 7 3 9 2 2 5 2 4 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:18.0pt;
font-family:"Times New Roman";
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman";}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri Light";
color:#2F5496;}
p.floatcenter, li.floatcenter, div.floatcenter
{mso-style-name:floatcenter;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
text-align:center;
font-size:12.0pt;
font-family:"Times New Roman";}
p.floatleft, li.floatleft, div.floatleft
{mso-style-name:floatleft;
mso-style-priority:99;
margin-top:0cm;
margin-right:12.0pt;
margin-bottom:12.0pt;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman";}
p.floatright, li.floatright, div.floatright
{mso-style-name:floatright;
mso-style-priority:99;
margin-top:0cm;
margin-right:0cm;
margin-bottom:12.0pt;
margin-left:12.0pt;
font-size:12.0pt;
font-family:"Times New Roman";}
p.box, li.box, div.box
{mso-style-name:box;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
margin-bottom:12.0pt;
margin-left:0cm;
background:#F8F8F8;
font-size:12.0pt;
font-family:"Times New Roman";}
p.dark, li.dark, div.dark
{mso-style-name:dark;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman";}
p.medium, li.medium, div.medium
{mso-style-name:medium;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman";}
p.light, li.light, div.light
{mso-style-name:light;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman";}
p.dark1, li.dark1, div.dark1
{mso-style-name:dark1;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
background:#DEDEDE;
font-size:12.0pt;
font-family:"Times New Roman";}
p.medium1, li.medium1, div.medium1
{mso-style-name:medium1;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
background:#EFEFEF;
font-size:12.0pt;
font-family:"Times New Roman";}
p.light1, li.light1, div.light1
{mso-style-name:light1;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
background:#F8F8F8;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle29
{mso-style-type:personal;
font-family:Calibri;
color:windowtext;}
span.EmailStyle32
{mso-style-type:personal-compose;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:743455085;
mso-list-template-ids:-1763901716;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:2047220297;
mso-list-template-ids:1050736798;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026"/>
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1"/>
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal" style="text-align:justify"><span style="font-size:11.0pt;font-family:Calibri">ICANN Launches Testing Platform for the KSK Rollover. This is important for those who have DNSSEC deployments as part of their operations.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><span style="font-size:11.0pt;font-family:Calibri">Fahd Batayneh<o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><span style="font-size:11.0pt;font-family:Calibri">ICANN<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">Date: </span>
</b><span style="font-family:Calibri;color:black">Monday, March 13, 2017 at 12:38 PM<br>
<b>Subject: </b>ICANN News Alert -- ICANN Launches Testing Platform for the KSK Rollover<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div style="border:solid #CCCCCC 1.0pt;padding:8.0pt 8.0pt 8.0pt 8.0pt">
<div>
<p class="MsoNormal"><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.icann.org_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=pu7jN3q1ZBfuo7H0_TGgnLZ6DmTKXODkmnlRRHjLLAY&m=c7UCGDMiRYsW0lbWApGmj-zm4XN9jl-FEKs4jm05yIw&s=QRwxGfwQnrANnxoV-8nGf5mVCefJkBBu0JhzTXJVgxA&e="><span style="text-decoration:none"><img border="0" width="94" height="94" id="_x0000_i1026" src="https://www.icann.org/sites/default/files/assets/icann-primary-logo-94x94-en.png" alt="ANN"></span></a><o:p></o:p></p>
<h2 style="text-align:justify">News Alert<o:p></o:p></h2>
<p style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:7.5pt;margin-left:0cm;text-align:justify">
<span style="font-family:Arial"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_news_announcement-2D2017-2D03-2D13-2Den&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=pu7jN3q1ZBfuo7H0_TGgnLZ6DmTKXODkmnlRRHjLLAY&m=c7UCGDMiRYsW0lbWApGmj-zm4XN9jl-FEKs4jm05yIw&s=tTWjf1YEVoojyhQxy_53GpkKXW9wo1QTliedfL-7JRQ&e=">https://www.icann.org/news/announcement-2017-03-13-en</a><o:p></o:p></span></p>
<div style="margin-top:15.0pt">
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" align="center">
</div>
</div>
<h2 style="margin-bottom:0cm;margin-bottom:.0001pt;text-align:justify">ICANN Launches Testing Platform for the KSK Rollover<o:p></o:p></h2>
<p style="mso-margin-top-alt:11.25pt;margin-right:0cm;margin-bottom:0cm;margin-left:0cm;margin-bottom:.0001pt;text-align:justify">
13 March 2017<o:p></o:p></p>
<p style="text-align:justify"><em><b>13 March 2017</b></em> – ICANN is offering a testing platform for network operators and other interested parties to confirm that their systems can handle the automated update process for the upcoming Root Zone Domain Name
Systems Security Extensions (DNSSEC) Key Signing Key (KSK) rollover. <strong>The KSK rollover is currently scheduled for 11 October 2017.</strong><o:p></o:p></p>
<p style="text-align:justify">"Currently, seven hundred and fifty million people are using DNSSEC-validating resolvers that could be affected by the KSK rollover," said ICANN's Vice President of Research, Matt Larson. "The testing platform is an easy way for
operators to confirm that their infrastructure supports the ability to handle the rollover without manual intervention."<o:p></o:p></p>
<p style="text-align:justify">Internet service providers, network operators and others who have enabled DNSSEC validation must update their systems with the new KSK. This can be done in one of two ways:<o:p></o:p></p>
<ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:justify;mso-list:l1 level1 lfo3">
An operator can configure a new trust anchor <em>manually</em> by obtaining the new root zone KSK from the iana.org website at
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.iana.org_dnssec_files&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=pu7jN3q1ZBfuo7H0_TGgnLZ6DmTKXODkmnlRRHjLLAY&m=c7UCGDMiRYsW0lbWApGmj-zm4XN9jl-FEKs4jm05yIw&s=5NAr5uU9UgMqTrp9jvnYNeD1iywY0qPfTnXVfsLR0to&e=">
https://www.iana.org/dnssec/files</a>. <o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:justify;mso-list:l1 level1 lfo3">
An operator can enable a feature available in many validating resolvers that <em>
automatically</em> detects and configures a new root zone KSK as a trust anchor, in which case they need take no action.
<o:p></o:p></li></ul>
<p style="text-align:justify"><strong>Check to see if your systems are ready by visiting
<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__go.icann.org_KSKtest&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=pu7jN3q1ZBfuo7H0_TGgnLZ6DmTKXODkmnlRRHjLLAY&m=c7UCGDMiRYsW0lbWApGmj-zm4XN9jl-FEKs4jm05yIw&s=li2Xss94ViZCNi-F1A5P9SlXT6J4nhuDc8tws96Ayfo&e=">
go.icann.org/KSKtest</a>.</strong><o:p></o:p></p>
<p style="text-align:justify">The KSK has been widely distributed and configured by every operator performing DNSSEC validation. If the validating resolvers using DNSSEC do not have the new key when the KSK is rolled, end users relying on those resolvers will
encounter errors and be unable to access the Internet. A careful and coordinated effort is required to ensure that the update does not interfere with normal operations.<o:p></o:p></p>
<p style="text-align:justify">More information is available at <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_kskroll&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=pu7jN3q1ZBfuo7H0_TGgnLZ6DmTKXODkmnlRRHjLLAY&m=c7UCGDMiRYsW0lbWApGmj-zm4XN9jl-FEKs4jm05yIw&s=p5ac6QrqDt68Ukqe30MDaGOOfDY_Q3xpP1iXJ8UI8aU&e=">
www.icann.org/kskroll</a>.<o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>