[LACNIC/Politicas] Fwd: DNSSEC Deployment in ARPA Children

[Francisco Arias]

Parece que pronto tendremos la cadena de confianza de DNSSEC completa
desde la raíz hasta las distribuciones/asignaciones de los RIRs en el
DNS inverso.

Saludos,

Francisco.




---------- Forwarded message ----------
From: Joe Abley <joe.abley at icann.org>
Date: 28 April 2010 06:29
Subject: [lacnog] DNSSEC Deployment in ARPA Children
To: "lacnog at lacnic.net" <lacnog at lacnic.net>


Colleagues,

ICANN plans to begin a test deployment of DNSSEC in various zones
starting on 2010-04-29:

 IN-ADDR-SERVERS.ARPA
 IP6.ARPA
 IP6-SERVERS.ARPA
 IRIS.ARPA
 URI.ARPA
 URN.ARPA

These zones will be signed using RSASHA256 and NSEC with 2048-bit KSKs
and 1024-bit ZSKs.

Given DNSSEC deployment experience to date, ICANN does not expect the
signing of these zones to cause any operational problems. However,
should you have any concerns please feel free to contact us at
ticket at dns.icann.org or phone +1 310 301 5810 (e-mail/ticket
preferred).

At the end of the test period, given no observed or reported harmful
effects, ICANN will arrange for trust anchors for these zones to be
included in ARPA as DS RRSets and will invite the five RIRs to submit
DS RRSet add/delete requests in IP6.ARPA when they are ready. We
anticipate the testing period to last at least two weeks.

Regards,


Joe Abley
Director DNS Operations, ICANN
_______________________________________________
LACNOG mailing list
LACNOG at lacnic.net
https://mail.lacnic.net/mailman/listinfo/lacnog