Final step of .com DNSSEC deployment

Brent Jones brent at
Fri Apr 1 05:54:01 UTC 2011

On Thu, Mar 31, 2011 at 1:05 PM, Matt Larson <mlarson at> wrote:
> As part of the deployment of DNSSEC in .com, the zone has been signed
> and in a "deliberately unvalidatable" state for several weeks.  Late
> last week the .com key material was unobscured and the actual keys
> have been visible in the zone since March 24.
> The final step in the deployment was publishing the .com zone's DS
> record in the root zone.
> I am pleased to report that the root zone including a DS record for
> .com was published at approximately 1500 UTC today, March 31.
> Matt Larson, on behalf of the many people at Verisign who made this
> deployment possible

Nice work! Congrats!

/me goes to signing some things

Brent Jones
brent at

More information about the NANOG mailing list