[sdnog] KSK Rollover Postponed

[Nishal Goburdhan]

On 28 Sep 2017, at 20:35, Nishal Goburdhan <nishal at controlfreak.co.za> wrote:
> On 28 Sep 2017, at 20:30, Fahd Batayneh <fahd.batayneh at icann.org> wrote: 
>> Date: Thursday, September 28, 2017 at 8:32 PM
>> https://www.icann.org/news/announcement-2017-09-27-en
> 
> 
> if you run a recursive DNS server, and you are using DNSSEC validation (and you should be doing this!) please take some time to read:  https://www.icann.org/dns-resolvers-checking-current-trust-anchors
> basically, you want to make sure that you’re using the new key, and the article above tells you how to make sure you are (and therefore, you will remain unaffected *when* the root KSK is eventually rolled).


more - if you are running BIND:   https://kb.isc.org/article/AA-01529/169/KSK-2010-Rollover.html


—n.