<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=en-JO link="#467886" vlink="#96607D" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal style='text-align:justify'><span lang=EN-US><a href="https://www.icann.org/en/announcements/details/icann-publishes-new-dnssec-trust-anchor-to-prepare-for-2026-15-08-2024-en">https://www.icann.org/en/announcements/details/icann-publishes-new-dnssec-trust-anchor-to-prepare-for-2026-15-08-2024-en</a><o:p></o:p></span></p><div style='border:none;border-bottom:solid windowtext 1.5pt;padding:0cm 0cm 1.0pt 0cm'><p class=MsoNormal style='text-align:justify'><span lang=EN-US><o:p> </o:p></span></p></div><p class=MsoNormal style='text-align:justify'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'>The Internet Corporation for Assigned Names and Numbers (ICANN), through the Internet Assigned Numbers Authority functions it facilitates, recently published an update to the <a href="https://www.iana.org/dnssec/files">trust anchors</a> for Domain Name System Security Extensions (DNSSEC).</p><p class=MsoNormal style='text-align:justify'><o:p> </o:p></p><p class=MsoNormal style='text-align:justify'>DNSSEC trust anchors serve as the ultimate points of trust for the DNSSEC system. DNSSEC secures the DNS by validating authentic domain name data that has not been altered by third parties. Updates to the trust anchors require careful coordination among Internet infrastructure operators to ensure a seamless transition and maintain the security and stability of the DNS.</p><p class=MsoNormal style='text-align:justify'><o:p> </o:p></p><p class=MsoNormal style='text-align:justify'>The recent update adds a new cryptographic key that is planned to be used to sign the DNS root zone starting in 2026. Software vendors and system package maintainers are encouraged to begin their processes for distributing this new trust anchor.</p><p class=MsoNormal style='text-align:justify'><o:p> </o:p></p><p class=MsoNormal style='text-align:justify'>ICANN plans to prepublish the new cryptographic key in the DNS starting on 11 January 2025, with a standby period of nearly two years before a rollover in October 2026. This provides ample opportunity to propagate the new trust anchor and provides the capability to roll over to it sooner should a rollover have to occur on an accelerated timeline.</p><p class=MsoNormal style='text-align:justify'><o:p> </o:p></p><p class=MsoNormal style='text-align:justify'>Operational announcements regarding the rollover are published on the <a href="https://lists.icann.org/postorius/lists/root-dnssec-announce.icann.org/">root-dnssec-announce</a> mailing list. Discussion is encouraged on the separate <a href="https://lists.icann.org/postorius/lists/ksk-rollover.icann.org/">ksk-rollover mailing list</a>.</p><p class=MsoNormal style='text-align:justify'><o:p> </o:p></p><p class=MsoNormal style='text-align:justify'>More information on the rollover is published at <a href="https://www.iana.org/dnssec/files">https://www.iana.org/dnssec/files</a>.</p></div></body></html>