[LACNIC/Seguridad] [lacnog] Root Zone DNSSEC Deployment Technical Status Update

[Carlos Marcelo Martinez Cagnazzo]

Solo para comentar que la ceremonia fue un exito. Tuve el privilegio
de poder participar de la misma como Crypto Officer #4, y quiero
aprovechar esto para felicitar al staff de ICANN y muy en particular a
Francisco Arias por todo el trabajo realizado para llegar a este
punto.

saludos,

Carlos Martinez

2010/7/12 Francisco Arias <francisco en arias.com.mx>:
> Sólo para recordarles que la ceremonia de la KSK de la raíz comienza a
> las 20:00 UTC de hoy; será transmisión en vivo en:
>
> http://dns.icann.org/ksk/stream/
>
> Saludos,
>
> Francisco.
>
>
>
> On 10 July 2010 09:40, Joe Abley <joe.abley en icann.org> wrote:
>> Root Zone DNSSEC Deployment
>> Technical Status Update 2010-07-10
>>
>> This is the tenth of a series of technical status updates intended
>> to inform a technical audience on progress in signing the root zone
>> of the DNS.
>>
>>
>> RESOURCES
>>
>> Details of the project, including documentation published to date,
>> can be found at <http://www.root-dnssec.org/>.
>>
>> We'd like to hear from you. If you have feedback for us, please
>> send it to rootsign en icann.org.
>>
>>
>> KSK CEREMONY 2
>>
>> The second KSK ceremony for the root zone will take place in El
>> Segundo, CA, USA on Monday 2010-07-12. The ceremony is scheduled
>> to begin at 1300 local time (2000 UTC) and is expected to end by
>> 1900 local time (0200 UTC).
>>
>> Video from Ceremony 2 will be recorded for audit purposes, as with
>> Ceremony 1. Video and associated audit materials will be published
>> before the signed root enters full production on 2010-07-15. Details
>> will be circulated before that date.
>>
>> ICANN will operate a separate camera whose video will not be retained
>> for audit purposes, but which will instead be streamed live in order
>> to provide remote observers an opportunity to watch the ceremony.
>> The live stream will be provided on a best-effort basis.
>>
>> The live video stream will be available at:
>>
>>  http://dns.icann.org/ksk/stream/
>>
>>
>> FULL PRODUCTION SIGNED ROOT ZONE
>>
>> The transition from Deliberately-Unvalidatable Root Zone (DURZ) to
>> production signed root zone will take place on 2010-07-15.
>>
>> Trust anchor publication, according to draft-icann-dnssec-trust-anchor-00
>> will take place after the maintenance window closes, once a final
>> set of tests have been completed by ICANN and the results have been
>> found to be positive.
>>
>>
>> FTP ACCESS TO SIGNED ZONE FILES
>>
>> Following the transition on 2010-07-15 the unsigned root and ARPA
>> zone files published at
>>
>>  ftp://rs.internic.net/domain/
>>  ftp://ftp.internic.net/domain/
>>
>> will be replaced by signed zone files. That is, the zone files
>> retrieved from both FTP servers will contain DNSSEC data, and will
>> hence faithfully represent the zones being served by root servers.
>>
>>
>> PLANNED DEPLOYMENT SCHEDULE
>>
>> Already completed:
>>
>>  2010-01-27: L starts to serve DURZ
>>
>>  2010-02-10: A starts to serve DURZ
>>
>>  2010-03-03: M, I start to serve DURZ
>>
>>  2010-03-24: D, K, E start to serve DURZ
>>
>>  2010-04-14: B, H, C, G, F start to serve DURZ
>>
>>  2010-05-05: J starts to serve DURZ
>>
>>  2010-06-16: First Key Signing Key (KSK) Ceremony
>>
>> To come:
>>
>>  2010-07-12: Second Key Signing Key (KSK) Ceremony
>>
>>  2010-07-15: Distribution of validatable, production, signed root
>>    zone; publication of root zone trust anchor
>>
>>  (Please note that this schedule is tentative and subject to change
>>  based on testing results or other unforeseen factors.)
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>
> _______________________________________________
> Seguridad mailing list
> Seguridad en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/seguridad
>



-- 
--
=========================
Carlos M. Martinez-Cagnazzo
http://cagnazzo.name
=========================