[Lista ArNOG] Fwd: [lacnog] Fwd: Root Zone Trust Anchors updated

[Luis Constanzo]

-----Mensaje original-----
De: "Federico Torga" <ftorga en gmail.com>
Enviado el: ‎03/‎02/‎2017 19:12
Para: "lista en arnog.com.ar" <lista en arnog.com.ar>
Asunto: Re: [Lista ArNOG] Fwd: [lacnog] Fwd: Root Zone Trust Anchors updated



Draft Timeline
These times are subject to change based on operational considerations.
October 27, 2016: KSK rollover process begins as the new KSK is generated.
July 11, 2017: Publication of new KSK in DNS.
September 19, 2017: Size increase for DNSKEY response from root name servers.
October 11, 2017: New KSK begins to sign the root zone key set (the actual rollover event).
January 11, 2018: Revocation of old KSK.
March 22, 2018: Last day the old KSK appears in the root zone.
August 2018: Old key is deleted from equipment in both ICANN Key Management Facilities.


2017-02-03 16:42 GMT-03:00 Luciano Minuchin <luciano.minuchin en gmail.com>:

Reenvio este mail, estén atentos a esto que puede afectar a todos los que tienen DNSs durante el lapso de este año.
La nueva clave se tendrá que actualizar en todos los servidores de DNS que tengan ya sea de forma manual o por servicios de update quienes los tengan. Este atentos.


Cualquier duda me mandan mail directo estoy para ayudarlos.






Saludos.
Luciano.




---------- Forwarded message ----------
From: Carlos M. Martinez <carlosm3011 en gmail.com>
Date: 2017-02-03 15:38 GMT-03:00
Subject: [lacnog] Fwd: Root Zone Trust Anchors updated
To: Latin America and Caribbean Region Network Operators Group <lacnog en lacnic.net>


Estimados amigos:

Retransmito un anuncio importante proveniente de IANA. Se ha generado la nueva clave KSK de la zona raíz, tal como hemos comentado en las últimas reuniones de LACNIC.

Si bien esta clave no está visible en la zona raíz aún (pueden chequearlo con un dig DNSKEY . @i.root-servers-net), se espera que en el correr del año comienza el período de transición de claves.

S2

Carlos


Forwarded message:


From: Kim Davies <kim.davies en iana.org>
To: root-dnssec-announce en icann.org <root-dnssec-announce en icann.org>
Subject: Root Zone Trust Anchors updated
Date: Fri, 3 Feb 2017 18:29:29 +0000

Yesterday, we successfully completed Root Zone KSK Ceremony 28. Part of this ceremony was to replicate a newly generated KSK in our key management facility on the US West Coast following its creation at the prior ceremony on the US East Coast in October 2016.

Now that the KSK is safely instantiated in both locations, we consider this KSK operational, and the Root Zone Trust Anchors file has been updated to reflect this. The KSK generated in 2010 is still being used today but it is planned to transition to the new key later this year. Software implementers should make sure they have up-to-date root zone trust anchors and/or update mechanisms such that either trust anchor can be used to verify the root zone KSK.

Information on the root anchors is at https://www.iana.org/dnssec/files

This work is part of the Root KSK Rollover project, more information is at https://www.icann.org/resources/pages/ksk-rollover

Kim Davies
Director, Technical Services
IANA Services

_______________________________________________
root-dnssec-announce mailing list
root-dnssec-announce en icann.org
https://mm.icann.org/mailman/listinfo/root-dnssec-announce

_______________________________________________
LACNOG mailing list
LACNOG en lacnic.net
https://mail.lacnic.net/mailman/listinfo/lacnog
Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog




_______________________________________________
Lista mailing list
Lista en arnog.com.ar
http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/lista/attachments/20170203/44a44e8e/attachment-0001.html>