[191243] in North American Network Operators' Group
Root and ARPA DNSSEC operational message -- signature validity period
daemon@ATHENA.MIT.EDU (Wessels, Duane)
Tue Aug 30 17:33:12 2016
X-Original-To: nanog@nanog.org
From: "Wessels, Duane" <dwessels@verisign.com>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Tue, 30 Aug 2016 21:32:53 +0000
Errors-To: nanog-bounces@nanog.org
--Apple-Mail=_FF5822BD-1945-401B-AC60-22AE8B0F8DF5
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
DNSSEC signatures in the Root and ARPA zones are currently given a =
validity
period of 10 days. The validity period is being increased to 13 days, =
per
the recommendations of RSSAC's Report on Root Zone TTLs [1] (aka =
RSSAC003).
Note that we are not aware of any cases where the 10-day signature =
validity
period has caused problems for DNSSEC validators. This is a =
precautionary
measure designed to accommodate a worst-case scenario.
This change will be implemented on September 6, 2016. Please feel free
to contact us at RZM@verisign.com with concerns or questions, and to =
forward
this notice to others who may not have already received it.
[1] =
https://www.icann.org/en/system/files/files/rssac-003-root-zone-ttls-21aug=
15-en.pdf
DW
--Apple-Mail=_FF5822BD-1945-401B-AC60-22AE8B0F8DF5
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="signature.asc"
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iQEcBAEBCAAGBQJXxfuFAAoJEGyZpGmowJiNPgcH/R1flEhrB5R+JQUIVakHDZs4
OtydCd0BMPlrBbwT5+lIw/+Kb4RRkpaLsyRyr3aIsMarCHnr9K7CicA3ZjfJAULR
aRCkD/6+VwMXMP4LHHWmrA+dNITdBH4dvQFo7WT8IP5HAmZ+ajIJcnUt/AF7T3Bs
PjngItwRvdsbH3nc8Yocus1Z7zsagKrqopFpofErucQTu4Roo9SMSQ+ktKxLH40V
cyuHi7BoZltpEd22WwxRI9kMsLA8ggolAExfIk9pUFusUEiaHZzJ0n8dPfqLWycm
KzsC8NGMRCxGD8XVSRk+7MYDShyuyK8oyQ7fU7ZjsDWckf+IeyCnbxvq+hVvkRo=
=nhDg
-----END PGP SIGNATURE-----
--Apple-Mail=_FF5822BD-1945-401B-AC60-22AE8B0F8DF5--
