<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="">
<title>ICANN News Alert</title>
<meta content="icann, internet, internet corporation for assigned names and numbers, iana" name="keywords">
<meta content="Internet Corporation for Assigned Names and Numbers" name="description">
<style type="text/css">
table.convey {
width: 100%;
font-family: Arial, Helvetica, sans-serif;
border: 1px solid #d8d8d8;
border-collapse: collapse;
}
table.convey th, table.convey td {
border: 1px solid #d8d8d8;
padding: .5em;
}
table.convey .dark {
background-color: #dedede;
}
table.convey .medium {
background-color: #efefef;
}
table.convey .light {
background-color: #f8f8f8;
}
.floatcenter {
margin-left: auto;
margin-right: auto;
text-align: center;
}
.floatleft {
float: left;
margin: 0 1em 1em 0;
}
.floatright {
float: right;
margin: 0 0 1em 1em;
}
.box {
background-color: #f8f8f8;
border: 1px solid #efefef;
-webkit-border-radius: 4px;
-khtml-border-radius: 4px;
-moz-border-radius: 4px;
border-radius: 4px;
padding: 15px 15px;
margin-bottom: 1em;
}
</style>
<div style="background-color: #ffffff; font-family: arial; font-size: small;">
<div style="width:758px; padding:10px; border: 1px solid #cccccc; margin-left: auto; margin-right: auto;">
<div style="width: 738px; margin-left: auto; margin-right: auto;"><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.icann.org_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=Dw1wa10KXjmZGUH9amzuGdKSzXxFwcRC31pnbsN-RaQ&s=9F9ReQMrd9TMC6YB_xW57eE-IrJgOZ8sW6lQ1FjDXNo&e="><img alt="ICANN" src="https://www.icann.org/sites/default/files/assets/icann-primary-logo-94x94-en.png" style="border: 0px; width: 94px; height: 94px; float: left; margin-top: 0px; margin-right: 10px;">[icann.org]</a>
<h2>News Alert</h2>
<p style="margin: 0px 0px 10px 0px; font-family: arial; font-size: small;"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_news_announcement-2D2017-2D03-2D13-2Den&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=Dw1wa10KXjmZGUH9amzuGdKSzXxFwcRC31pnbsN-RaQ&s=tkFdsNtLgIRRXdBsvMzlpLSABdixQ7eAybl0MNB3_9s&e=">https://www.icann.org/news/announcement-2017-03-13-en[icann.org]</a></p>
<hr style="margin: 20px 0px 0px 0px;">
<h2 style="clear: left; margin-bottom: 0px;">ICANN Launches Testing Platform for the KSK Rollover</h2>
<p style="margin: 15px 0px 0px 0px;">13 March 2017</p>
<p><strong><em>13 March 2017</em></strong> – ICANN is offering a testing platform for network operators and other interested parties to confirm that their systems can handle the automated update process for the upcoming Root Zone Domain Name Systems Security
Extensions (DNSSEC) Key Signing Key (KSK) rollover. <strong>The KSK rollover is currently scheduled for 11 October 2017.</strong></p>
<p>"Currently, seven hundred and fifty million people are using DNSSEC-validating resolvers that could be affected by the KSK rollover," said ICANN's Vice President of Research, Matt Larson. "The testing platform is an easy way for operators to confirm that
their infrastructure supports the ability to handle the rollover without manual intervention."</p>
<p>Internet service providers, network operators and others who have enabled DNSSEC validation must update their systems with the new KSK. This can be done in one of two ways:</p>
<ul>
<li>An operator can configure a new trust anchor <em>manually</em> by obtaining the new root zone KSK from the iana.org website at
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.iana.org_dnssec_files&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=Dw1wa10KXjmZGUH9amzuGdKSzXxFwcRC31pnbsN-RaQ&s=7ukuCEtPIpACnstCwUIeYBHbrurF9zQvD23jaINedQ0&e=">
https://www.iana.org/dnssec/files[iana.org]</a>. </li><li>An operator can enable a feature available in many validating resolvers that <em>
automatically</em> detects and configures a new root zone KSK as a trust anchor, in which case they need take no action.
</li></ul>
<p><strong>Check to see if your systems are ready by visiting <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__go.icann.org_KSKtest&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=Dw1wa10KXjmZGUH9amzuGdKSzXxFwcRC31pnbsN-RaQ&s=yHkbAFGZ1pbzXVkiCTpkhkTKstX48wNAbbAl5nIOt5s&e=">
go.icann.org/KSKtest[go.icann.org]</a>.</strong></p>
<p>The KSK has been widely distributed and configured by every operator performing DNSSEC validation. If the validating resolvers using DNSSEC do not have the new key when the KSK is rolled, end users relying on those resolvers will encounter errors and be
unable to access the Internet. A careful and coordinated effort is required to ensure that the update does not interfere with normal operations.</p>
<p>More information is available at <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_kskroll&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=Dw1wa10KXjmZGUH9amzuGdKSzXxFwcRC31pnbsN-RaQ&s=pTHGpxvN6Z_84spoP-9-2LLP2CrkSuw5wybMixPJWiY&e=">
www.icann.org/kskroll[icann.org]</a>.</p>
</div>
</div>
<br>
<br>
</div>
</div>
</span>
</body>
</html>