In this episode of PING, Verisign Fellow Duane Wessels discusses notable changes in the DNS root zone in the last 13 years. Duane joined Verisign in the early stages of DNSSEC deployment and has conducted measurements of the DNS for many years, with the Measurement Factory, DNS OARC, and Verisign.
Duane touches on topics such as deploying DNSSEC, the impact of RSA key length changes on packet sizes, the first DNSSEC Key Signing Key (KSK) changes, and upcoming modifications to the KSK and Zone Signing Key (ZSK) algorithms.
Learn more in these related posts on the APNIC Blog:
- DNSSEC algorithms for TLDs (and everyone else) (2022)
- DNS security and key ceremonies (2021)
- DNSSEC with RSA-4096 keys (2021)
- DNSSEC KSK Ceremony 43 (2021)
- Drilling for the KSK (2020)
- Analyzing the KSK roll (2018)
- Measuring the KSK Roll (2018)
- Update on the Root KSK Rollover Project (2017)
- Rolling the Root (2016)
- DNSSEC Algorithm Roll-over (2015)
Subscribe and share your story
You can stream and subscribe to PING via the following channels:
If you’re interested in sharing your insights or research, please get in touch — we’re always looking for great stories from the community. And please do let us know what you think of the podcast as well as the APNIC Blog so we can keep improving.
The views expressed by the featured speakers are their own and do not necessarily reflect the views of APNIC.
The views expressed by the authors of this blog are their own and do not necessarily reflect the views of APNIC. Please note a Code of Conduct applies to this blog.