[139256] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Final step of .com DNSSEC deployment

daemon@ATHENA.MIT.EDU (Matt Larson)
Thu Mar 31 16:05:26 2011

Date: Thu, 31 Mar 2011 16:05:19 -0400
From: Matt Larson <mlarson@verisign.com>
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

As part of the deployment of DNSSEC in .com, the zone has been signed
and in a "deliberately unvalidatable" state for several weeks.  Late
last week the .com key material was unobscured and the actual keys
have been visible in the zone since March 24.

The final step in the deployment was publishing the .com zone's DS
record in the root zone.

I am pleased to report that the root zone including a DS record for
.com was published at approximately 1500 UTC today, March 31.

Matt Larson, on behalf of the many people at Verisign who made this
deployment possible


home help back first fref pref prev next nref lref last post