[Dnssec-deployment] Root Zone DNSSEC Deployment Technical Status Update

[Steve Crocker]

Joe,

Congratulations to you and everyone else at ICANN, VeriSign, NTIA and, indeed, throughout the community for a well planned and well executed operation.  It's been extraordinary, exemplary and, most importantly, successful.

Your note below is the model of the dry, straightforward, check list completed, report in the best traditions of a NASA moon landing and similar lengthy, complex and well run projects.  Well done!

Steve

On Jul 16, 2010, at 10:35 AM, Joe Abley wrote:

> Root Zone DNSSEC Deployment
> Technical Status Update 2010-07-16
> 
> This is the twelfth of a series of technical status updates intended
> to inform a technical audience on progress in signing the root zone
> of the DNS.
> 
> 
> RESOURCES
> 
> Details of the project, including documentation published to date,
> can be found at <http://www.root-dnssec.org/>.
> 
> We'd like to hear from you. If you have feedback for us, please
> send it to rootsign at icann.org.
> 
> 
> FULL PRODUCTION SIGNED ROOT ZONE
> 
> The transition from Deliberately-Unvalidatable Root Zone (DURZ) to
> production signed root zone took place on 2010-07-15 at 2050 UTC. The
> first full production signed root zone had SOA serial 2010071501. There
> have been no reported harmful effects.  The root zone trust anchor can
> be found at <https://data.iana.org/root-anchors/>.
> 
> 
> PLANNED DEPLOYMENT SCHEDULE
> 
> Already completed:
> 
>  2010-01-27: L starts to serve DURZ
> 
>  2010-02-10: A starts to serve DURZ
> 
>  2010-03-03: M, I start to serve DURZ
> 
>  2010-03-24: D, K, E start to serve DURZ
> 
>  2010-04-14: B, H, C, G, F start to serve DURZ
> 
>  2010-05-05: J starts to serve DURZ
> 
>  2010-06-16: First Key Signing Key (KSK) Ceremony
> 
>  2010-07-12: Second Key Signing Key (KSK) Ceremony
> 
>  2010-07-15: Distribution of validatable, production, signed root
>    zone; publication of root zone trust anchor
> 
>