nanog mailing list archives

Re: DURZ published in root - you ready?


From: Mark Andrews <marka () isc org>
Date: Mon, 25 Jan 2010 13:53:52 +1100


In message <202705b1001241834l5b1911bat97ee2130f632f002 () mail gmail com>, Jorge Amodio writes:
Good point, tomorrow/today we'll start seeing what gets broken and
hopefully why.

Regards.
Jorge

I don't expect to see much until the last root server (J) switches
over.  DNS implemententations are remarkably robust at routing around
percieved "damage".

Week of 2010-05-03: J starts to serve DURZ

Mark
 
On Sun, Jan 24, 2010 at 8:30 PM, Danny McPherson <danny () tcb net> wrote:

Figured I'd drop a note here reminding folks of the
signed root zone publication timeline, which calls for
L root to begin serving a 'DURZ' the "week of 1/25/2010"
-- which is now - depending on what timezone you're in:

<http://www.root-dnssec.org/2010/01/14/status-update-january-2010/>

If you've not evaluated the *systemic effects* of a signed
root zone in your operating environment (prepped operations
and helpdesk staff, your own resolvers, etc..) I'd strongly
suggest you do so ASAP.

If you're not concerned because you're not signing anything -
do note that 'systemic' is the operative word above, as this
will impact you, whether you make any explicit changes in
your environment or not.

G'luck,

-danny



-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka () isc org


Current thread: