Thanks for the update.

I see "trust-anchor-telemetry '_ta-4f66-9728/IN'" from some departmental
DNS resolvers that forward to my university DNS resolvers.  But searching
the internet for "trust anchor 9728" did not find anything.

I would like to suggest that the hex representation be added to the Key
Status table on page "https://www.iana.org/dnssec/files"; to make it easier
to find and match the key to the telemetry.

-- 
Bob Harold

On Tue, Jan 7, 2025 at 3:21 PM Andres Pavez <[email protected]> wrote:

> Please note that there is a mistake with the time in my previous email.
> The new Key Signing Key (KSK) will be published in the DNS root zone on
> January 11 around 06:00 UTC, not 00:00 UTC as originally stated.
> Best regards,
> --
> Andres Pavez
> Cryptographic Key Manager
>
>
> On 1/7/25, 11:37, "dns-operations on behalf of Andres Pavez" <
> [email protected] <mailto:
> [email protected]> on behalf of [email protected]
> <mailto:[email protected]>> wrote:
>
>
> This is a reminder that the new Key Signing Key (KSK) will be published in
> the DNS root zone starting January 11 at 00:00:00 UTC.
>
>
> This will start the process of adoption of this trust anchor in RFC 5011
> aware resolvers. We encourage operators to pay attention during this
> process to monitor for any unexpected consequences.
>
>
> Publishing the KSK is part of the process of ensuring widespread adoption
> of the KSK prior to its use in signing, currently scheduled for October
> 2026.
>
>
> For more details, please visit: https://www.iana.org/dnssec/files <
> https://www.iana.org/dnssec/files>
>
>
> Thanks,
> --
> Andres Pavez
> Cryptographic Key Manager
>
>
>
>
>
>
>
>
> _______________________________________________
> dns-operations mailing list
> [email protected]
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to