[bdNOG] DNSSEC "Key Signing"

Mon Aug 6 15:34:57 BDT 2018

Dear BDNOG/BDIX Members,

Following mail from ICANN CTO on DNSSEC "key signing" process. This is for
your attention and support. Champika from ICANN is here in Dhaka for
SANOG/BDNOG.

You can directly contact him, if you have any query.

best regards,

Sumon

---<start of letter>---

Dear IXP Administrator,

The ICANN organization is requesting your help in a very important matter
that could affect some of the operators that connect to your Internet
exchange.

ICANN is undertaking a project to update the Internet's root zone DNSSEC
“key signing” key or KSK. The process, known as the KSK rollover, is
described here:  https://www.icann.org/kskroll.  This project may have an
operational impact on DNS resolution services if DNSSEC is deployed and
offered by your members/customers.

The process to update the root zone’s KSK has been ongoing since 2015. Last
year, ICANN paused this rollover project due to indications that some
operators may not have been prepared for the change in keys despite the
fact that we have presented to numerous network fora for several years,
sought global trade press coverage and written to various government
agencies. Even today, there is data suggesting that some operators will
encounter trouble when the KSK is changed.  The data is available at
http://root-trust-anchor-reports.research.icann.org.

As part of an ongoing campaign to increase awareness of the KSK rollover
and reach the resolver operators that are causing the announcements that
suggest their resolvers are unprepared for the KSK rollover, we are now
seeking your help. Despite our previous outreach, we need to make even
greater efforts to reach operators of DNS servers, many of which are ISPs.

Specifically, the goal of our outreach is to call the attention of network
operators to the information on this page:

https://www.icann.org/dns-resolvers-updating-latest-trust-anchor

We would appreciate your assistance and/or advice on contacting network
operators that are connecting through your IXP.  We are willing to
participate in any customer focused communications, supplying materials,
media outreach or any other forms of communication deemed appropriate for
an IXP and are willing to sign non-disclosure agreements should that be
necessary.

Thank you for your assistance in this important matter.

Respectfully,

David Conrad

ICANN Chief Technology Officer

---<end>----
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.bdnog.org/pipermail/nog/attachments/20180806/a9f9476f/attachment.html>