<div dir="ltr">Dear Yeslim,<div><br></div><div>Greetings.Thank you for sharing this link.</div><div><br></div><div>I tried to test the link on 29th March 2018 and got the following result(Snapshot 1).I am assuming that my concerned ISP has implemented DNSSec. Meanwhile, a saved copy in the cache does show a page on Comcast Network management as of 28th March 2018(Snapshot 2). </div><div><br></div><div>Can I analyse the screenshots and infer that my ISP has implemented DNSSec recently? Can you or someone direct me towards a more technical understanding of this test i.e. how does Option 1 lead to a valid inference that  DNS resolver is DNSSEC enabled? I can then ask a few of my friends to check it as well on their screens and I am sure that they will ask this question to me :)</div><div><br></div><div>Regards,</div><div>Prateek.</div><div><br></div><div><img src="cid:ii_jfckjccx0_16271fecc7e55164" width="472" height="265"><br><br></div><div><br></div><div><img src="cid:ii_jfcknjk51_1627201d25f3bb06" width="472" height="265"><br><br></div><div><br></div><div>Regards,</div><div>Prateek.</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Mar 29, 2018 at 1:56 PM, Yesim Nazlar <span dir="ltr"><<a href="mailto:yesim.nazlar@icann.org" target="_blank">yesim.nazlar@icann.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">







<div bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="m_-3321319154987091463WordSection1">
<p class="MsoNormal"><span>Dear Lianna,<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>You’re right it might be a bit tricky to understand the result.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>Thanks for sharing your own experience
</span><span style="font-family:"Apple Color Emoji"">☺</span><span><u></u><u></u></span></p><span class="">
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="TR">Thank you.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="TR">Kind Regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="TR">Yeşim Nazlar</span><span><u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
</span><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">APAC-Discuss <<a href="mailto:apac-discuss-bounces@atlarge-lists.icann.org" target="_blank">apac-discuss-bounces@atlarge-<wbr>lists.icann.org</a>> on behalf of Lianna Galstyan <<a href="mailto:lianna@isoc.am" target="_blank">lianna@isoc.am</a>><br>
<b>Date: </b>Thursday, March 29, 2018 at 10:18 AM<br>
<b>To: </b>"<a href="mailto:apac-discuss@atlarge-lists.icann.org" target="_blank">apac-discuss@atlarge-lists.<wbr>icann.org</a>" <<a href="mailto:apac-discuss@atlarge-lists.icann.org" target="_blank">apac-discuss@atlarge-lists.<wbr>icann.org</a>><br>
<b>Subject: </b>Re: [APAC-Discuss] FW: DNSSEC KSK Rollover test<u></u><u></u></span></p>
</div><div><div class="h5">
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Dear Yesim,<br>
<br>
Thanks for including the explanation. Actually I tested it yesterday and since the page did not appear to me, I thought it's a failure, which is just the contrary. It means the DNS resolver I'm using is DNSSEC-enabled :)<br>
<br>
Lianna<u></u><u></u></p>
<div>
<p class="MsoNormal">On 29/03/2018 10:36, Yesim Nazlar wrote:<u></u><u></u></p>
</div>
</div></div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div class="h5">
<p class="MsoNormal"><span>Dear All,</span><u></u><u></u></p>
<p class="MsoNormal"><span> </span><u></u><u></u></p>
<p class="MsoNormal"><span>Below, you may find the DNSSEC KSK Rollover test link. Feel free to test!
</span><span style="font-family:"MS Mincho",serif">☺</span><u></u><u></u></p>
<p class="MsoNormal"><span> </span><u></u><u></u></p>
<p class="MsoNormal"><span> </span><u></u><u></u></p>
<p class="MsoNormal"><span lang="TR">Thank you.</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="TR">Kind Regards,</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="TR">Yeşim Nazlar</span><u></u><u></u></p>
<p class="MsoNormal"><span> </span><u></u><u></u></p>
<p class="MsoNormal"><span> </span><u></u><u></u></p>
</div></div><div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">Begin forwarded message:<u></u><u></u></p>
</div>
<p class="MsoNormal"><br>
<br>
<br>
<u></u><u></u></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div class="h5">
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">From: </span>
</b><span style="font-family:"Helvetica",sans-serif">Alan Greenberg <<a href="mailto:alan.greenberg@mcgill.ca" target="_blank">alan.greenberg@mcgill.ca</a>></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">Subject: [ALAC] DNSSEC KSK Rollover test</span></b><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">Date: </span>
</b><span style="font-family:"Helvetica",sans-serif">28 March 2018 4:41:07 am AEDT</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica",sans-serif">To: </span>
</b><span style="font-family:"Helvetica",sans-serif">ALAC <<a href="mailto:alac@atlarge-lists.icann.org" target="_blank">alac@atlarge-lists.icann.org</a>></span><u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div></div><div>
<p class="MsoNormal"></p><div><div class="h5">Please take a moment to go to <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__dnssec-2Dfailed.org&d=DwMFAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=AFwn0nI9yH82cocDZSxjL26fgi--VdF9nGYYhougdyM&s=CqzIHujav6N5bY6lEWA1WFPpOM0Fyq3OMF48MKY_n4c&e=" target="_blank">
http://dnssec-failed.org[<wbr>dnssec-failed.org]</a>.<br>
<br>
One of two things will happen:<br>
<br>
1. You will not be able to reach the site.<br>
<br>
or<br>
<br>
2. You will get a page on Comcast Network Management.<br>
<br>
If 2 is your result, the DNS resolver you are using is NOT DNSSEC-enabled and the KSK Rollover will be invisible to you.<br>
<br>
If you will be on the ALAC meeting, please do this before the meeting so you can report your results.<br>
<br>
Alan<br>
<br>
______________________________<wbr>_________________<br>
ALAC mailing list<br>
<a href="mailto:ALAC@atlarge-lists.icann.org" target="_blank">ALAC@atlarge-lists.icann.org</a><br>
</div></div><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__atlarge-2Dlists.icann.org_mailman_listinfo_alac&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=hbpT3PXp3P343l3nuJnCEYzPtJXveag1nsysJ3uoluU&e=" target="_blank">https://atlarge-lists.icann.<wbr>org/mailman/listinfo/alac[<wbr>atlarge-lists.icann.org]</a><br>
<br>
At-Large Online: <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.atlarge.icann.org&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=pBgW6mJ6byFLQUckBgESZOH2IyB4WutFKqNgS0AxuBs&e=" target="_blank">
http://www.atlarge.icann.org[<wbr>atlarge.icann.org]</a><br>
ALAC Working Wiki: <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__community.icann.org_display_atlarge_At-2DLarge-2BAdvisory-2BCommittee-2B-28ALAC-29&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=B7OCr2MmDERCVEToI28Cno_EdewSXvg6aDD4A-UtEGE&e=" target="_blank">
https://community.icann.org/<wbr>display/atlarge/At-Large+<wbr>Advisory+Committee+(ALAC)[<wbr>community.icann.org]</a><u></u><u></u><p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div><span class="">
<p class="MsoNormal"><br>
<br>
<br>
<u></u><u></u></p>
<pre>______________________________<wbr>_________________<u></u><u></u></pre>
<pre>APAC-Discuss mailing list<u></u><u></u></pre>
<pre><a href="mailto:APAC-Discuss@atlarge-lists.icann.org" target="_blank">APAC-Discuss@atlarge-lists.<wbr>icann.org</a><u></u><u></u></pre>
</span><pre><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__atlarge-2Dlists.icann.org_mailman_listinfo_apac-2Ddiscuss&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=3alLu-xPzosszBKbjE0ff3g2X6UO6wPuZRsvJoh7aY8&e=" target="_blank">https://atlarge-lists.icann.<wbr>org/mailman/listinfo/apac-<wbr>discuss[atlarge-lists.icann.<wbr>org]</a><u></u><u></u></pre>
<pre><u></u> <u></u></pre>
<pre>Homepage for the region: <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.apralo.org&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=ztNJg3-0oyRC3n4FDc2w48vW7XjNUWslf0AVR4UYlYQ&e=" target="_blank">http://www.apralo.org[apralo.<wbr>org]</a><u></u><u></u></pre>
</blockquote>
<p class="MsoNormal"><br>
<br>
<u></u><u></u></p>
</div>
</div>

<br>______________________________<wbr>_________________<br>
APAC-Discuss mailing list<br>
<a href="mailto:APAC-Discuss@atlarge-lists.icann.org">APAC-Discuss@atlarge-lists.<wbr>icann.org</a><br>
<a href="https://atlarge-lists.icann.org/mailman/listinfo/apac-discuss" rel="noreferrer" target="_blank">https://atlarge-lists.icann.<wbr>org/mailman/listinfo/apac-<wbr>discuss</a><br>
<br>
Homepage for the region: <a href="http://www.apralo.org" rel="noreferrer" target="_blank">http://www.apralo.org</a><br></blockquote></div><br></div>