ICANN Postpones DNSSEC Root KSK Rollover – October 11 will NOT be the big day
People involved with DNS security no longer have to be focused on October 11. News broke yesterday that ICANN has decided to postpone the Root KSK Rollover to an unspecified future date.
To be clear:
The Root KSK Rollover will NOT happen on October 11, 2017.
ICANN’s announcement states the the KSK rollover is being delayed…
…because some recently obtained data shows that a significant number of resolvers used by Internet Service Providers (ISPs) and Network Operators are not yet ready for the Key Rollover. The availability of this new data is due to a very recent DNS protocol feature that adds the ability for a resolver to report back to the root servers which keys it has configured.
Getting More Information
Discussion on the public DNSSEC-coord mailing list indicates more info may be available in a talk Duane Wessels is giving at the DNS-OARC meeting tomorrow (Friday, September 29). The abstract of his session is:
A Look at RFC 8145 Trust Anchor Signaling for the 2017 KSK Rollover
RFC 8145 (“Signaling Trust Anchor Knowledge”) was published in April 2017. This RFC describes how recursive name servers can signal, to authoritative servers, the trust anchors that they have configured for Continue reading
Top end speed increased from 25 Gb/s to 30 Gb/s thanks to technology advances.
Telco clouds: There's a lot of telco and not a lot of cloud.
Rancher's customers have been demanding Kubernetes support.