Upload
others
View
5
Download
0
Embed Size (px)
Citation preview
PreparingfortheRootKSKRollover,11October2017
AdamPeake,ICANNCivilSocietyEngagement|31May2017
| 3
Whatyouneedtoknow;changingtherootkeysigningkey
• ICANNischanging(rolling)thetopcryptographickeyusedintheDNSprotocol
• anewcryptographickeypairwillbegenerated,thenewpubliccomponentdistributedtoDNSSECvalidatingresolvers
• ifyoudon'tuseDNSSECyoursystemwillnotbeaffectedbytherollover
• ifyoursoftwaresupportsautomatedupdatesofDNSSECtrustanchors,therootzoneKSKwillbeupdateautomatically
• Ifyousoftwaredoesnotsupportautomatedupdatesornotconfiguredtouseit,manuallyupdatethesoftware'strustanchor–availableherehttp://data.iana.org/root-anchors
• KSKrolloverwilloccur11October2017– updateanytimebeforetherollover
| 4
Thankyou
• Moreinformation:http://www.icann.org/kskroll
• Updatesoftware:http://data.iana.org/root-anchors
• Testbed:http://go.icann.org/KSKtest
• Contact:[email protected] (subjectKSKrollover)
• Questions:[email protected] (I'llmakesureyougetanswers)