[lacnog] [Ext] Reminder: New KSK Publication in DNS Root Zone

[Andres Pavez]

Please note that there is a mistake with the time in my previous email. 
The new Key Signing Key (KSK) will be published in the DNS root zone on January 11 around 06:00 UTC, not 00:00 UTC as originally stated.
Best regards,
-- 
Andres Pavez 
Cryptographic Key Manager 


On 1/7/25, 11:41, "LACNOG on behalf of Andres Pavez" <lacnog-bounces en lacnic.net <mailto:lacnog-bounces en lacnic.net> on behalf of andres.pavez en iana.org <mailto:andres.pavez en iana.org>> wrote:


This is a reminder that the new Key Signing Key (KSK) will be published in the DNS root zone starting January 11 at 00:00:00 UTC.


This will start the process of adoption of this trust anchor in RFC 5011 aware resolvers. We encourage operators to pay attention during this process to monitor for any unexpected consequences. 


Publishing the KSK is part of the process of ensuring widespread adoption of the KSK prior to its use in signing, currently scheduled for October 2026.


For more details, please visit: https://www.iana.org/dnssec/files <https://www.iana.org/dnssec/files> 


Thanks,
-- 
Andres Pavez 
Cryptographic Key Manager 








------------ próxima parte ------------
Se ha borrado un mensaje adjunto que no está en formato texto plano...
Nombre     : smime.p7s
Tipo       : application/pkcs7-signature
Tamaño     : 4863 bytes
Descripción: no disponible
Url        : <https://mail.lacnic.net/pipermail/lacnog/attachments/20250107/7de60407/attachment.bin>