Updated DNSSEC KSK Rollover Information [Archived]

OUT OF DATE?

Here in the Vault, information is published in its final form and then not changed or updated. As a result, some content, specifically links to other pages and other references, may be out-of-date or no longer available.

Posted: Wednesday, 02 June 2010

ARIN is notifying the community that it has just increased the KSK rollover period from one to two years.* We have increased the rollover period as a cautionary measure to mitigate additional load on authoritative nameservers.

For more information about ARIN’s DNSSEC key maintenance procedure please see:
https://www.arin.net/resources/dnssec/key_rollover.html

Regards,

Mark Kosters
Chief Technology Officer
American Registry for Internet Numbers (ARIN)

*We anticipate that our parent zone (in-addr.arpa) will be signed within two years and rollovers will then be transparent to the community, i.e.they would not involve manual reconfiguration at each key rollover event.

OUT OF DATE?

Here in the Vault, information is published in its final form and then not changed or updated. As a result, some content, specifically links to other pages and other references, may be out-of-date or no longer available.