[lacnog] Fwd: Root zone DNSSEC deployment web site and technical status update

[Mehmet Akcin]

This was fast :)

thank you i was about to do that

Mehmet

On Dec 15, 2009, at 9:16 PM, Francisco Arias wrote:

> Por si no han visto el correo.
> 
> Quizá lo más importante, el sitio http://www.root-dnssec.org/ y el que la zona raíz firmada comenzará a ser visible en la semana del 11 de enero próximo en uno de los servidores raíz. Abajo pueden ver la agenda completa de cómo irá siendo distribuido la zona a cada uno de los servidores raíz.
> 
> Para quienes operen DNSs recursivos y firewalls (ISP's), si no lo han hecho ya, es el momento de revisar la infraestructura para asegurar que las respuestas de DNS mayores a 512 Bytes pueden transitar por sus redes y/o ser procesadas por sus servidores recursivos. Hay que soportar ENDS0 y TCP en los servidores recursivos también.
> 
> Me parece que ya tenemos un tema para reunión de Curaçao ...
> 
> Saludos,
> 
> Francisco.
> 
> 
> ---------- Forwarded message ----------
> From: Matt Larson <mlarson en verisign.com>
> Date: 2009/12/15
> Subject: [dns-operations] Root zone DNSSEC deployment web site and technical status update
> To: dns-operations en mail.dns-oarc.net
> 
> 
> The root zone DNSSEC deployment team is pleased to announce a new web
> site with information about the project, http://www.root-dnssec.org.
> The site serves as a repository for documentation and information
> about deploying DNSSEC in the root zone, including technical status
> updates.  The first status update is available on the site and is
> included below, as well.  Additional documentation will be posted as
> it becomes available.  Important announcements and future status
> updates will appear in the site's RSS feed,
> http://www.root-dnssec.org/rss.
> 
> The design team welcomes your feedback: you can reach the entire team
> at rootsign en icann.org.
> 
> On behalf of the root zone DNSSEC deployment team,
> 
> Matt Larson
> 
> --
> 
> Status Update, December, 2009
> 
> This is the first of a series of technical status updates intended to
> inform a technical audience on the progress of deploying DNSSEC in the
> root zone of the DNS.
> 
> RESOURCES
> 
> Details of the project, including documentation published to date, can
> be found at http://www.root-dnssec.org/.
> 
> We'd like to hear from you. If you have feedback for us, please send
> it to rootsign en icann.org.
> 
> DOCUMENTATION
> 
> This project involves the creation of a large volume of documentation,
> individual components of which will be released as they have completed
> internal review. The following documents are expected to be released
> as drafts before the end of December 2009:
> 
> * Root Zone DNSSEC Deployment Plan
> * Root Zone Trust Anchor Publication
> 
> DEPLOYMENT STATUS
> 
> Several root server operators have started testing a lightweight
> packet capture tool designed to provide a full record of priming
> queries received over the period covering DNSSEC deployment in the
> root zone. We hope this data collection will be in full production on
> all root servers before the end of December, providing baseline data
> which will allow the reaction of the system as a whole to deployment
> events to be observed.
> 
> On 2009-12-01, the first pre-production KSR exchange between ICANN and
> VeriSign and the signing of the root zone within VeriSign's production
> infrastructure commenced. The signing, validation, measurement and
> monitoring infrastructure will now be subject to full internal
> testing.
> 
> PLANNED DEPLOYMENT SCHEDULE
> 
> 2009-12-01: KSR exchange, root zone signing begins, internal to
> VeriSign and ICANN; generation of DURZ
> 
> Week of 2010-01-11: L starts to serve DURZ
> 
> Week of 2010-02-08: A starts to serve DURZ
> 
> Week of 2010-03-01: M, I start to serve DURZ
> 
> Week of 2010-03-22: D, K, E start to serve DURZ
> 
> Week of 2010-04-12: B, H, C, G, F start to serve DURZ
> 
> Week of 2010-05-03: J starts to serve DURZ
> 
> 2010-07-01: Distribution of validatable, production, signed root zone;
> publication of root zone trust anchor.
> 
> (Please note that this schedule is tentative and subject to change
> based on testing results or other unforeseen factors.)
> _______________________________________________
> dns-operations mailing list
> dns-operations en lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> 
> _______________________________________________
> LACNOG mailing list
> LACNOG en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog