[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dns-operations
Subject:    [dns-operations] NET zone operational announcement: DNSSEC algorithm rollover
From:       "Wessels, Duane via dns-operations" <dns-operations () dns-oarc ! net>
Date:       2023-10-31 19:18:24
Message-ID: mailman.2309.1698779912.28592.dns-operations () lists ! dns-oarc ! net
[Download RAW message or body]

Received: from mail1.verisign.com (mail1.verisign.com [72.13.63.30])
	by ix1.dns-oarc.net (8.14.4/8.14.4/Debian-8+deb8u2) with ESMTP id 39VJIPvt031940
	(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL)
	for <dns-operations@dns-oarc.net>; Tue, 31 Oct 2023 19:18:31 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
  d=verisign.com; l=750; q=dns/txt; s=VRSN;
  t=1698779911;
  h=from:to:subject:date:message-id:content-id:
   content-transfer-encoding:mime-version;
  bh=5bAKAQ/1VIJwyB57xgtbH/rf+2AnN3IzZSfp65FNljk=;
  b=WS8Q5kZaG66Id44rg2+bTaCQCa44r0A61LlgPDXUsR+vypZ1t/du139X
   NreEZoRFZDli+RhMzxfzlJVdS1fq6Sjpi5po+JS5AeRFWqoPVdcIF09pK
   Ih/z29q9V1MwukXIuzr7gVVp3FVaPO//YoWIXvdJk6oqpNtNj5DUTdn23
   63jkF581Ipf+60o0UK+Fwke45/HWD37+VTV9xkTrNZsgJnAuEYUCrNeod
   aeYFY7JgwFzk5anYRDMY35OP5d5F98jSC1jUYEjXwNiVkq2V3fsbQWbUK
   6lkbysqUWcoLJxbxBx5jGRSltaoRE4OPrOAPUQ0zU6yExNJqlGGVwHs0I
   A==;
IronPort-Data: A9a23:O4L6w631CLVDrfpUhPbD5bZwkn2cJEfYwER7XKvMYLTBsI5bpzFVz
 DcbXGDSa6qKZTDwL9p/b9y29ksP6JHdzINnHgI5qSg9HnlHl5HIVI+TRqvS04F+DeWYFR46s
 J9OAjXkBJppJpMJjk71atANlVEliefSAOCU5NfsYkhZXRVjRDoqlSVtkus4hp8AqdWiCmthg
 /uryyHkEAHjg2Uc3l48sfrZ80o3562q4lv0g3RlDRx1lA6G/5UqJM9HTU2BByOQapVZGOe8W
 9HCwNmRlo8O105wYj8Nuu+TnnwiGtY+DyDX4pZlc/HKbix5m8AH+v1T2Mw0Mh4L1mrTz7id/
 /0W3XC4YV9B0qTkxrxBA0EAe810FfUuFLTveRBTvSEPpqFvnrSFL/hGVSkL0YMkFulfG3xH9
 /wEOD80XAGetv+om+mqSPtMiZF2RCXrFNt3VnBI5wv/VMkAbKCbGuPU7thCxHE5ioZQB+3YI
 cEebFKDbjyZO1sWZQxRUc9l2rv47pX8W2QwRFa9qbU6+HPeyBdZzrX3McHUddrMTsJQ9qqdj
 jiXoDijWUFCXDCZ4Rmm6HKtwcPRpyehftxVLLe2zdU1gHTGkwT/DzVTDzNXu8KRhkilHtVHJ
 lYd5ispq7Ma+EqwC970RRb+pnOY1iPwQPJaCetj9weA2vKNph2HHC4BTyUEYttgvtUwHHo0z
 ESP2djuAFSDrYGodJ5UzZ/MxRvaBMTfBTZqifMsJefd3+TenQ==
IronPort-HdrOrdr: A9a23:3ps8dqAJz3MIfxDlHelx55DYdb4zR+YMi2TDsHoBLCC9E/bo9f
 xG88566faZslgssRIb9uxoUZPoKU80nqQFgrX5U43CYCDW/EWlK4145ZbvznnKC0TFmtJ15O
 NFf7JlANP9SXp3na/BijWQIpIFzMOc+K6lwd3CyWxgJDsGV4h74xxnBh2gHkp6eQlDCfMCf6
 ah2g==
X-Talos-CUID: 9a23:QWMwzm90H0ac9as5SWWVv1QJE8Ilbm3S9UXBPn6lFz0yWb+HaVDFrQ==
X-Talos-MUID: 9a23:QkVm2QUQ444NKOTq/BzPnjFjc+t22aD0Lh5KqZ8IgOLbNQUlbg==
X-IronPort-AV: E=Sophos;i="6.03,266,1694736000"; 
   d="scan'208";a="29742380"
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by
 BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.1.2507.34; Tue, 31 Oct 2023 15:18:24 -0400
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([10.173.153.48]) by
 BRN1WNEX01.vcorp.ad.vrsn.com ([10.173.153.48]) with mapi id 15.01.2507.034;
 Tue, 31 Oct 2023 15:18:24 -0400
From: "Wessels, Duane" <dwessels@verisign.com>
To: "Wessels, Duane via dns-operations" <dns-operations@dns-oarc.net>
Subject: NET zone operational announcement: DNSSEC algorithm rollover
Thread-Topic: NET zone operational announcement: DNSSEC algorithm rollover
Thread-Index: AQHaDC8FR0jE5HYoT02jrRojuumGVw==
Date: Tue, 31 Oct 2023 19:18:24 +0000
Message-ID: <75AA2781-1592-4423-B81A-B44B8ABB4FD0@verisign.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3731.700.6)
x-originating-ip: [10.170.148.18]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <C8136E8AE1151B44B67339E458A9DBBD@verisign.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by ix1.dns-oarc.net id \
39VJIPvt031940

Verisign will soon begin the transition to DNSSEC algorithm 13 (ECDSA) for the NET \
zone. Over the next few days, algorithm 13 signatures will start to appear in the \
zone, followed by the algorithm 13 DNSKEY records. We expect the DS record for the \
NET zone to change from algorithm 8 to algorithm 13 on or around November 8th. \
Additional information can be found at our blog post and DNS-OARC presentation URLs \
below:

https://blog.verisign.com/security/dnssec-algorithm-update/
https://indico.dns-oarc.net/event/47/contributions/1012/

We expect no operational impacts for end users, but please feel free to reach out to \
us with concerns or any observations of anomalous behavior related to this algorithm \
rollover.

DW



_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations


[prev in list] [next in list] [prev in thread] [next in thread]