Root Zone DNSSEC Deployment
Technical Status Update 2010-06-09
This is the eighth of a series of technical status updates intended
to inform a technical audience on progress in signing the root zone
of the DNS.
RESOURCES
Details of the project, including documentation published to date,
can be found at <http://www.root-dnssec.org/>.
We'd like to hear from you. If you have feedback for us, please
send it to rootsign@icann.org.
PUBLIC NOTICE
The US Department of Commerce National Telecommunications and
Information Administration (NTIA) has issued a Public Notice regarding
the deployment of DNSSEC in the root zone.
http://www.ntia.doc.gov/frnotices/2010/FR_DNSSEC_Notice_06092010.pdf
The Public Notice makes reference to the final report submitted to
NTIA by ICANN and VeriSign which contains a summary of the project
work to date together with a recommendation that full deployment
should proceed.
http://www.ntia.doc.gov/reports/2010/DNSSEC_05282010.pdf
The Public Notice includes a public review period. Comments may be
submitted by postal mail, fax or e-mail before 2010-06-21. Instructions
for the submission of comments are included in the Public Notice.
PLANNED DEPLOYMENT SCHEDULE
Already completed:
2010-01-27: L starts to serve DURZ
2010-02-10: A starts to serve DURZ
2010-03-03: M, I start to serve DURZ
2010-03-24: D, K, E start to serve DURZ
2010-04-14: B, H, C, G, F start to serve DURZ
2010-05-05: J starts to serve DURZ
To come:
2010-06-16: First Key Signing Key (KSK) Ceremony
2010-07-15: Distribution of validatable, production, signed root
zone; publication of root zone trust anchor
(Please note that this schedule is tentative and subject to change
based on testing results or other unforeseen factors.)