[bdNOG] Board Approval of KSK Roll

Mon Oct 1 09:03:10 BDT 2018

Thanks Champ, here it goes,

Dear bdNOG Members,

Pls. be informed about the KSK rollover happening on 11th October, 2018. Pls. Go through the trailing mail of Champ.

Regards,

GZ Kabir

> On 1 Oct, 2018, at 7:25 AM, Champika Wijayatunga <champika.wijayatunga at icann.org> wrote:
> 
>  Hi Sumon Bhai and Kabir Bhai,
>  
> Hope all is well.
>  
> Just wanted to let you know that ICANN board has approved the KSK rollover and it will go as scheduled on 11thOctober 2018.
> https://www.icann.org/resources/press-material/release-2018-09-18-en <https://www.icann.org/resources/press-material/release-2018-09-18-en>
>  
> It would be good if you can share this announcement to BDNOG, BDIX and ISPAB community.
>  
> Thank you.
>  
> Best regards,
> Champ.
>  
>  
>  
> From: Sumon Ahmed Sabir <sumon at office.bdcom.com <mailto:sumon at office.bdcom.com>>
> Date: Friday, July 20, 2018 at 3:41 PM
> To: Champika Wijayatunga <champika.wijayatunga at icann.org <mailto:champika.wijayatunga at icann.org>>
> Cc: Gazi Zehadul Kabir <gzkabir at gmail.com <mailto:gzkabir at gmail.com>>, "gzkabir at bdcom.com <mailto:gzkabir at bdcom.com>" <gzkabir at bdcom.com <mailto:gzkabir at bdcom.com>>, Sumon Ahmed Sabir <sumon at fiberathome.net <mailto:sumon at fiberathome.net>>
> Subject: [Ext] Re: Awareness of KSK rollover date and request to IXP Admins
>  
>   <>
> Dear Champ,
>  
> We will be happy to distribute it in our community and thanks for sharing.
>  
> As we know most of us(if not all) are very smart in BD and did not deployed complex DNS-SEC and very much relying on unsecured DNS systems, so not expecting any impact on ksk rollover.
>  
> But this message may also help as another awareness  for DNS-SEC deployment.
>  
>  
> Best regards,
>  
>  
> Sumon
>  
>  
> ২০ জুলাই, ২০১৮ ৪:২৪ am এ, "Champika Wijayatunga" <champika.wijayatunga at icann.org <mailto:champika.wijayatunga at icann.org>> লিখেছেন:
>>  
>> Hi Sumon Bhai and Kabir Bhai,
>>  
>> I’m reaching out to IXP Administrators like yourselves regarding the KSK rollover date of 11 October 2018. I’m appending a letter from ICANN CTO requesting your help to raise awareness amongst the BD IXP peering partners please. If you can share this with BDIX and BDNOG members that would be great.
>>  
>>  
>> ---<start of letter>---
>>  
>>  
>> Dear IXP Administrator,
>>  
>> The ICANN organization is requesting your help in a very important matter that could affect some of the operators that connect to your Internet exchange.
>>  
>> ICANN is undertaking a project to update the Internet's root zone DNSSEC “key signing” key or KSK. The process, known as the KSK rollover, is described here:  https://www.icann.org/kskroll [icann.org] <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_kskroll&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=whMuiz76IxmdJbBnWNPuUwHRa_HmUhi8cbyjOVXXy4j6ajas1OsDbkyxUnub9MEs&m=71uXLQEE5h6QZIW5aaJIv57oCsRvyudkPPG53I0512Y&s=5o6XrVLFoU5X1g_pfY_RtgrvqEX4wOoKTTxTp-zIN30&e=>.  This project may have an operational impact on DNS resolution services if DNSSEC is deployed and offered by your members/customers.
>>  
>> The process to update the root zone’s KSK has been ongoing since 2015. Last year, ICANN paused this rollover project due to indications that some operators may not have been prepared for the change in keys despite the fact that we have presented to numerous network fora for several years, sought global trade press coverage and written to various government agencies. Even today, there is data suggesting that some operators will encounter trouble when the KSK is changed.  The data is available at http://root-trust-anchor-reports.research.icann.org [root-trust-anchor-reports.research.icann.org] <https://urldefense.proofpoint.com/v2/url?u=http-3A__root-2Dtrust-2Danchor-2Dreports.research.icann.org&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=whMuiz76IxmdJbBnWNPuUwHRa_HmUhi8cbyjOVXXy4j6ajas1OsDbkyxUnub9MEs&m=71uXLQEE5h6QZIW5aaJIv57oCsRvyudkPPG53I0512Y&s=V1-MzICDEMor9kabvG1nreyOWhFOVz3EJd1IwRqfgvc&e=>.
>>  
>> As part of an ongoing campaign to increase awareness of the KSK rollover and reach the resolver operators that are causing the announcements that suggest their resolvers are unprepared for the KSK rollover, we are now seeking your help. Despite our previous outreach, we need to make even greater efforts to reach operators of DNS servers, many of which are ISPs.
>>  
>> Specifically, the goal of our outreach is to call the attention of network operators to the information on this page:
>> https://www.icann.org/dns-resolvers-updating-latest-trust-anchor [icann.org] <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_dns-2Dresolvers-2Dupdating-2Dlatest-2Dtrust-2Danchor&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=whMuiz76IxmdJbBnWNPuUwHRa_HmUhi8cbyjOVXXy4j6ajas1OsDbkyxUnub9MEs&m=71uXLQEE5h6QZIW5aaJIv57oCsRvyudkPPG53I0512Y&s=jVHhVXRtwqbss2dGSftHL-Rn4X-U0lysknyRWiof3tE&e=>
>>  
>> We would appreciate your assistance and/or advice on contacting network operators that are connecting through your IXP.  We are willing to participate in any customer focused communications, supplying materials, media outreach or any other forms of communication deemed appropriate for an IXP and are willing to sign non-disclosure agreements should that be necessary.
>>  
>> Thank you for your assistance in this important matter.
>>  
>> Respectfully,
>> David Conrad
>> ICANN Chief Technology Officer
>>  
>> ---<end>----
>>  
>>  
>>  
>> Thank you.
>>  
>> Best regards,
>> Champika
>>  
>> ——————————————
>> Champika Wijayatunga
>> Security, Stability and Resiliency (SSR)
>> Regional SSR Engagement Manager - APAC
>> Internet Corporation for Assigned Names and Numbers (ICANN)
>> Email: <champika.wijayatunga at icann.org <mailto:champika.wijayatunga at icann.org>>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.bdnog.org/pipermail/nog/attachments/20181001/4fad85e2/attachment-0001.html>