nanog mailing list archives

Re: Final step of .com DNSSEC deployment


From: Brent Jones <brent () servuhome net>
Date: Thu, 31 Mar 2011 22:54:01 -0700

On Thu, Mar 31, 2011 at 1:05 PM, Matt Larson <mlarson () verisign com> wrote:
As part of the deployment of DNSSEC in .com, the zone has been signed
and in a "deliberately unvalidatable" state for several weeks.  Late
last week the .com key material was unobscured and the actual keys
have been visible in the zone since March 24.

The final step in the deployment was publishing the .com zone's DS
record in the root zone.

I am pleased to report that the root zone including a DS record for
.com was published at approximately 1500 UTC today, March 31.

Matt Larson, on behalf of the many people at Verisign who made this
deployment possible



Nice work! Congrats!

/me goes to signing some things

-- 
Brent Jones
brent () servuhome net


Current thread: