Rolling the root key
The root key of the DNS is scheduled to roll on 11 October. How many DNSSEC-validating recursive resolvers have learned of KSK-2024 and incorporated it into their TA sets?
Tag: KSK Roll
[Podcast] The October 2026 root KSK roll
In this episode of PING, Verisign’s Duane Wessels discusses the transition to the third DNS root KSK key pair, which is scheduled to begin signing the root zone on 11 October 2026.
APNIC 62: Updates in DNS, DHCP, certificate security, and BGP routing resilience
APNIC 62 Technical Session 1 — Internet Operations highlighted major developments across Internet infrastructure, including new management capabilities for Kea DHCP and BIND DNS, preparations for the DNSSEC root KSK rollover, and ongoing challenges in certificate revocation.
Analyzing the KSK roll
It’s time to look at the data to see what we can learn from the first roll of the root zone’s KSK.
DNS-OARC 29: KSK roll and two days of DNS internals
The 29th DNS-OARC workshop was a remarkably effective DNS meeting, with a wealth of operational experience and engagement.
Measuring the KSK Roll
APNIC Labs has been assisting with measuring how ready the Internet is for the DNS Root Zone KSK rollover.
The uncertainty of measuring the DNS
While there are a number of approaches to DNS measurement, all have their own forms of potential bias and uncertainty.
Measuring the Root Zone KSK Trust
APNIC Labs attempts to validate the proportion of resolvers reporting trust in KSK-2017 ahead of the restart of the Root Zone DNS key roll process.
Peak DNSSEC?
Since 2016, APNIC Labs has observed a drop in global DNSSEC adoption. Have we passed the point of peak use of DNSSEC?
Update on the Root KSK Rollover Project
Guest Post: ICANN has announced that it will not roll the root zone KSK in the first quarter of 2018. Read why.