[191308] in North American Network Operators' Group
Re: Root and ARPA DNSSEC operational message -- signature validity
daemon@ATHENA.MIT.EDU (Wessels, Duane)
Tue Sep 6 17:33:07 2016
X-Original-To: nanog@nanog.org
From: "Wessels, Duane" <dwessels@verisign.com>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Tue, 6 Sep 2016 21:33:01 +0000
In-Reply-To: <5F1C5102-CC30-4CAF-9C2D-61AFDF6EC2C7@verisign.com>
Errors-To: nanog-bounces@nanog.org
--Apple-Mail=_A2CCD1F1-311C-428E-A4E4-27A0361A181B
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
FYI, this work is now complete.
DW
> On Aug 30, 2016, at 2:32 PM, Wessels, Duane <dwessels@verisign.com> =
wrote:
>=20
> DNSSEC signatures in the Root and ARPA zones are currently given a =
validity
> period of 10 days. The validity period is being increased to 13 days, =
per
> the recommendations of RSSAC's Report on Root Zone TTLs [1] (aka =
RSSAC003).
>=20
> Note that we are not aware of any cases where the 10-day signature =
validity
> period has caused problems for DNSSEC validators. This is a =
precautionary
> measure designed to accommodate a worst-case scenario.
>=20
> This change will be implemented on September 6, 2016. Please feel =
free
> to contact us at RZM@verisign.com with concerns or questions, and to =
forward
> this notice to others who may not have already received it.
>=20
> [1] =
https://www.icann.org/en/system/files/files/rssac-003-root-zone-ttls-21aug=
15-en.pdf
>=20
> DW
>=20
--Apple-Mail=_A2CCD1F1-311C-428E-A4E4-27A0361A181B
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="signature.asc"
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iQEcBAEBCAAGBQJXzzYNAAoJEGyZpGmowJiNwnoIALM1S0oiOX0neE1hNDlPP2g3
j/gDPNBlp43yW5xnk+ISkVqyebr4X/tCFVc8aTl0RWJ+V9ip9Bu6yWGHIiJ0ZKKc
ALWxk9BUHR5/zuSwz18sepOcyo88GcnEI9lGZkxWaOgLWoS5XXI6GQtzldwmlLxp
mHczhfcnnrakDNBXcSGn3VZTJ1HcBJM+BHNH+JkXZ1c4NsILc9KeVe2b6cL/OnjP
+teSA8HVHyqThzAH+PXZ5Q/UWQPQHaToCK8Zu+gDg4bRQEDJrGwZjAXSE54BTM5o
VRY7jnA22Q2s2YUPvChVzPVbBxcIVl93G2sLfkkFTqf15+FeyU7L15V60w0sOo0=
=rid1
-----END PGP SIGNATURE-----
--Apple-Mail=_A2CCD1F1-311C-428E-A4E4-27A0361A181B--
