We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

Root Zone KSK Rollover update

Formal Metadata

Title
Root Zone KSK Rollover update
Alternative Title
Revoking the 2010 DNSKEY: Monitoring the events of 11th of January 2019
Title of Series
Number of Parts
561
Author
License
CC Attribution 2.0 Belgium:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
Language

Content Metadata

Subject Area
Genre
Abstract
The new root DNSKEY is in use since October 11th 2018. The old root DNSKEY is still present in the root zone, and will have the revoked bit set on January 11th, 2019. The intent is to monitor RFC8145 data from all the root-server operators. The DNSKEY roll for the root is a major event. The most noticeable step was using the new DNSKEY, which started on October 11th. The next step is revoking the old key. This is a minor event, but should still be visible in our RFC8145 data. We will monitor this event and track what happens via various measurement techniques.