[sdnog] FW: KSK Rollover Postponed

[Nishal Goburdhan]

On 28 Sep 2017, at 20:30, Fahd Batayneh <fahd.batayneh at icann.org> wrote: 
> Date: Thursday, September 28, 2017 at 8:32 PM
> https://www.icann.org/news/announcement-2017-09-27-en


if you run a recursive DNS server, and you are using DNSSEC validation (and you should be doing this!) please take some time to read:  https://www.icann.org/dns-resolvers-checking-current-trust-anchors
basically, you want to make sure that you’re using the new key, and the article above tells you how to make sure you are (and therefore, you will remain unaffected *when* the root KSK is eventually rolled).

if you are responsible for a recursive DNS server, and you are *not* running DNSSEC, then … naughty, naughty!

—n.