[Dnssec-deployment] .gov 2048bit ZSK to 1024 bit ZSK ?

[Eric Osterweil]

On Mar 17, 2010, at 10:53 AM, Richard Lamb wrote:

> Anyone notice ZSK key sizes changing on .gov?

Hey Rick,

You can check .gov's key sizes and other info (as of Mon Mar 15  
11:28:37 2010 UTC) at SecSpider:
	http://secspider.cs.ucla.edu/gov--zone.html


> Seems to aggravate the non-UDP-reassembling-router problems.  Never  
> really wanted to see www.ssa.gov anyway ;-)
> Nist.gov has 1024 bit ZSK.   Ssa.gov has 2048 bit ZSK

We haven't seen any PMTU availability problems from any pollers (also  
viewable at the above link).   :)

Eric

-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part
Url : http://dnssec-deployment.org/pipermail/dnssec-deployment/attachments/20100317/3db384c8/attachment.bin