nanog mailing list archives

Final step of .com DNSSEC deployment


From: Matt Larson <mlarson () verisign com>
Date: Thu, 31 Mar 2011 16:05:19 -0400

As part of the deployment of DNSSEC in .com, the zone has been signed
and in a "deliberately unvalidatable" state for several weeks.  Late
last week the .com key material was unobscured and the actual keys
have been visible in the zone since March 24.

The final step in the deployment was publishing the .com zone's DS
record in the root zone.

I am pleased to report that the root zone including a DS record for
.com was published at approximately 1500 UTC today, March 31.

Matt Larson, on behalf of the many people at Verisign who made this
deployment possible


Current thread: