DURZ published in root - you ready?

Mark Andrews marka at isc.org
Sun Jan 24 20:53:52 CST 2010


In message <202705b1001241834l5b1911bat97ee2130f632f002 at mail.gmail.com>, Jorge Amodio writes:
> Good point, tomorrow/today we'll start seeing what gets broken and
> hopefully why.
> 
> Regards.
> Jorge

I don't expect to see much until the last root server (J) switches
over.  DNS implemententations are remarkably robust at routing around
percieved "damage".

Week of 2010-05-03: J starts to serve DURZ

Mark
 
> On Sun, Jan 24, 2010 at 8:30 PM, Danny McPherson <danny at tcb.net> wrote:
> >
> > Figured I'd drop a note here reminding folks of the
> > signed root zone publication timeline, which calls for
> > L root to begin serving a 'DURZ' the "week of 1/25/2010"
> > -- which is now - depending on what timezone you're in:
> >
> > <http://www.root-dnssec.org/2010/01/14/status-update-january-2010/>
> >
> > If you've not evaluated the *systemic effects* of a signed
> > root zone in your operating environment (prepped operations
> > and helpdesk staff, your own resolvers, etc..) I'd strongly
> > suggest you do so ASAP.
> >
> > If you're not concerned because you're not signing anything -
> > do note that 'systemic' is the operative word above, as this
> > will impact you, whether you make any explicit changes in
> > your environment or not.
> >
> > G'luck,
> >
> > -danny
>
> >
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org




More information about the NANOG mailing list