[lacnog] Fwd: Root Zone Trust Anchors updated

[Carlos M. Martinez]

Estimados amigos:

Retransmito un anuncio importante proveniente de IANA. Se ha generado la 
nueva clave KSK de la zona raíz, tal como hemos comentado en las 
últimas reuniones de LACNIC.

Si bien esta clave no está visible en la zona raíz aún (pueden 
chequearlo con un dig DNSKEY . @i.root-servers-net), se espera que en el 
correr del año comienza el período de transición de claves.

S2

Carlos


Forwarded message:

> From: Kim Davies <kim.davies en iana.org>
> To: root-dnssec-announce en icann.org <root-dnssec-announce en icann.org>
> Subject: Root Zone Trust Anchors updated
> Date: Fri, 3 Feb 2017 18:29:29 +0000
>
> Yesterday, we successfully completed Root Zone KSK Ceremony 28. Part 
> of this ceremony was to replicate a newly generated KSK in our key 
> management facility on the US West Coast following its creation at the 
> prior ceremony on the US East Coast in October 2016.
>
> Now that the KSK is safely instantiated in both locations, we consider 
> this KSK operational, and the Root Zone Trust Anchors file has been 
> updated to reflect this. The KSK generated in 2010 is still being used 
> today but it is planned to transition to the new key later this year. 
> Software implementers should make sure they have up-to-date root zone 
> trust anchors and/or update mechanisms such that either trust anchor 
> can be used to verify the root zone KSK.
>
> Information on the root anchors is at 
> https://www.iana.org/dnssec/files
>
> This work is part of the Root KSK Rollover project, more information 
> is at https://www.icann.org/resources/pages/ksk-rollover
>
> Kim Davies
> Director, Technical Services
> IANA Services
>
> _______________________________________________
> root-dnssec-announce mailing list
> root-dnssec-announce en icann.org
> https://mm.icann.org/mailman/listinfo/root-dnssec-announce