--- Begin Message ---
On Fri, May 23, 2025 at 07:43:18AM -0300, Frederico A C Neves wrote:
> On Wed, May 21, 2025 at 03:14:24PM +0200, Arnold Dechamps via dns-operations
> wrote:
> > Date: Wed, 21 May 2025 15:14:24 +0200
> > From: Arnold Dechamps <[email protected]>
> > To: Joe Abley <[email protected]>
> > Cc: Shumon Huque <[email protected]>, [email protected]
> > Subject: Re: [dns-operations] .FI going insecure for two weeks (!)
> >
> > Hello Everyone,
> >
> > I did not have the opportunity to monitor this during the transition. I see
> > that they transitioned to algo 13 though. Did they went insecure in the
> > end? Is there somewhere I could see what happened in the past with their
> > dnssec?
> >
>
> From what is recorded at dnsviz with a ~1 day granularity, yes.
>
> 20250417-193258 UTC - Last alg #8
> https://dnsviz.net/d/fi/aAFXag/dnssec/
>
> 20250418-204723 UTC - First insecure
> https://dnsviz.net/d/fi/aAK6Ww/dnssec/
>
> 20250419-100553 UTC - Last insecure
> https://dnsviz.net/d/fi/aAN1gQ/dnssec/
>
> 20250420-075539 UTC - First alg #13
> https://dnsviz.net/d/fi/aASoew/dnssec/
Actually,
20250422-215938 UTC - First alg #13 DS
https://dnsviz.net/d/fi/aAgRSg/dnssec/
The previous one is the first time the zone apeared signed with alg #13.
Mastodns has "better" chronological information from the root perspective.
20250415-2044 remove alg #8 ds
https://mastodns.net/@diffroot/114344636547850162
20250422-1853 include alg #13 ds
https://mastodns.net/@diffroot/114383836309131015
Fred
--- End Message ---
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations