Root Zone DNSSEC Deployment Technical Status Update
joe.abley at icann.org
Wed Jun 9 15:45:20 UTC 2010
Root Zone DNSSEC Deployment
Technical Status Update 2010-06-09
This is the eighth of a series of technical status updates intended
to inform a technical audience on progress in signing the root zone
of the DNS.
Details of the project, including documentation published to date,
can be found at <http://www.root-dnssec.org/>.
We'd like to hear from you. If you have feedback for us, please
send it to rootsign at icann.org.
The US Department of Commerce National Telecommunications and
Information Administration (NTIA) has issued a Public Notice regarding
the deployment of DNSSEC in the root zone.
The Public Notice makes reference to the final report submitted to
NTIA by ICANN and VeriSign which contains a summary of the project
work to date together with a recommendation that full deployment
The Public Notice includes a public review period. Comments may be
submitted by postal mail, fax or e-mail before 2010-06-21. Instructions
for the submission of comments are included in the Public Notice.
PLANNED DEPLOYMENT SCHEDULE
2010-01-27: L starts to serve DURZ
2010-02-10: A starts to serve DURZ
2010-03-03: M, I start to serve DURZ
2010-03-24: D, K, E start to serve DURZ
2010-04-14: B, H, C, G, F start to serve DURZ
2010-05-05: J starts to serve DURZ
2010-06-16: First Key Signing Key (KSK) Ceremony
2010-07-15: Distribution of validatable, production, signed root
zone; publication of root zone trust anchor
(Please note that this schedule is tentative and subject to change
based on testing results or other unforeseen factors.)
More information about the NANOG