[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
DNSSEC Deployment in ARPA Children
- Subject: DNSSEC Deployment in ARPA Children
- From: dave at knig.ht (Dave Knight)
- Date: Thu, 29 Apr 2010 19:09:27 -0400
- In-reply-to: <[email protected]>
- References: <[email protected]>
On 2010-04-28, at 9:29 AM, Joe Abley wrote:
> Colleagues,
>
> ICANN plans to begin a test deployment of DNSSEC in various zones starting on 2010-04-29:
>
> IN-ADDR-SERVERS.ARPA
> IP6.ARPA
> IP6-SERVERS.ARPA
> IRIS.ARPA
> URI.ARPA
> URN.ARPA
>
> These zones will be signed using RSASHA256 and NSEC with 2048-bit KSKs and 1024-bit ZSKs.
The maintenance is complete, all of the zones are now DNSSEC signed.
We expect to include trust anchors for these zones following a testing period of around two weeks, given no observed or reported harmful effects.
If you observe any issues, or have any concerns please let us know at <ticket at dns.icann.org>.
Kind regards,
Dave Knight
Senior DNS Engineer, ICANN