[APAC-Discuss] FW: DNSSEC KSK Rollover test

Thu Mar 29 13:53:37 UTC 2018

Dear Yeslim,

Greetings.Thank you for sharing this link.

I tried to test the link on 29th March 2018 and got the following
result(Snapshot 1).I am assuming that my concerned ISP has implemented
DNSSec. Meanwhile, a saved copy in the cache does show a page on Comcast
Network management as of 28th March 2018(Snapshot 2).

Can I analyse the screenshots and infer that my ISP has implemented DNSSec
recently? Can you or someone direct me towards a more technical
understanding of this test i.e. how does Option 1 lead to a valid inference
that  DNS resolver is DNSSEC enabled? I can then ask a few of my friends to
check it as well on their screens and I am sure that they will ask this
question to me :)

Regards,
Prateek.

On Thu, Mar 29, 2018 at 1:56 PM, Yesim Nazlar <yesim.nazlar at icann.org>
wrote:

> Dear Lianna,
>
>
>
> You’re right it might be a bit tricky to understand the result.
>
>
>
> Thanks for sharing your own experience ☺
>
>
>
>
>
> Thank you.
>
> Kind Regards,
>
> Yeşim Nazlar
>
>
>
>
>
> *From: *APAC-Discuss <apac-discuss-bounces at atlarge-lists.icann.org> on
> behalf of Lianna Galstyan <lianna at isoc.am>
> *Date: *Thursday, March 29, 2018 at 10:18 AM
> *To: *"apac-discuss at atlarge-lists.icann.org" <apac-discuss at atlarge-lists.
> icann.org>
> *Subject: *Re: [APAC-Discuss] FW: DNSSEC KSK Rollover test
>
>
>
> Dear Yesim,
>
> Thanks for including the explanation. Actually I tested it yesterday and
> since the page did not appear to me, I thought it's a failure, which is
> just the contrary. It means the DNS resolver I'm using is DNSSEC-enabled :)
>
> Lianna
>
> On 29/03/2018 10:36, Yesim Nazlar wrote:
>
> Dear All,
>
>
>
> Below, you may find the DNSSEC KSK Rollover test link. Feel free to test!
> ☺
>
>
>
>
>
> Thank you.
>
> Kind Regards,
>
> Yeşim Nazlar
>
>
>
>
>
>
>
>
>
> Begin forwarded message:
>
>
>
>
> *From: *Alan Greenberg <alan.greenberg at mcgill.ca>
>
> *Subject: [ALAC] DNSSEC KSK Rollover test*
>
> *Date: *28 March 2018 4:41:07 am AEDT
>
> *To: *ALAC <alac at atlarge-lists.icann.org>
>
>
>
> Please take a moment to go to http://dnssec-failed.org[dnssec-failed.org]
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__dnssec-2Dfailed.org&d=DwMFAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=AFwn0nI9yH82cocDZSxjL26fgi--VdF9nGYYhougdyM&s=CqzIHujav6N5bY6lEWA1WFPpOM0Fyq3OMF48MKY_n4c&e=>
> .
>
> One of two things will happen:
>
> 1. You will not be able to reach the site.
>
> or
>
> 2. You will get a page on Comcast Network Management.
>
> If 2 is your result, the DNS resolver you are using is NOT DNSSEC-enabled
> and the KSK Rollover will be invisible to you.
>
> If you will be on the ALAC meeting, please do this before the meeting so
> you can report your results.
>
> Alan
>
> _______________________________________________
> ALAC mailing list
> ALAC at atlarge-lists.icann.org
> https://atlarge-lists.icann.org/mailman/listinfo/alac[
> atlarge-lists.icann.org]
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__atlarge-2Dlists.icann.org_mailman_listinfo_alac&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=hbpT3PXp3P343l3nuJnCEYzPtJXveag1nsysJ3uoluU&e=>
>
> At-Large Online: http://www.atlarge.icann.org[atlarge.icann.org]
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.atlarge.icann.org&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=pBgW6mJ6byFLQUckBgESZOH2IyB4WutFKqNgS0AxuBs&e=>
> ALAC Working Wiki: https://community.icann.org/display/atlarge/At-Large+
> Advisory+Committee+(ALAC)[community.icann.org]
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__community.icann.org_display_atlarge_At-2DLarge-2BAdvisory-2BCommittee-2B-28ALAC-29&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=B7OCr2MmDERCVEToI28Cno_EdewSXvg6aDD4A-UtEGE&e=>
>
>
>
>
>
>
> _______________________________________________
>
> APAC-Discuss mailing list
>
> APAC-Discuss at atlarge-lists.icann.org
>
> https://atlarge-lists.icann.org/mailman/listinfo/apac-discuss[atlarge-lists.icann.org] <https://urldefense.proofpoint.com/v2/url?u=https-3A__atlarge-2Dlists.icann.org_mailman_listinfo_apac-2Ddiscuss&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=3alLu-xPzosszBKbjE0ff3g2X6UO6wPuZRsvJoh7aY8&e=>
>
>
>
> Homepage for the region: http://www.apralo.org[apralo.org] <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.apralo.org&d=DwMDaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=mrDeztziKLa7gZqGADzxcnHA3QXmXYsnChWYBR4NElI&m=2E5ukQ3W4tHxjx7MG6eoW1dhLnTYhmd6aLQvelGp4aE&s=ztNJg3-0oyRC3n4FDc2w48vW7XjNUWslf0AVR4UYlYQ&e=>
>
>
>
>
> _______________________________________________
> APAC-Discuss mailing list
> APAC-Discuss at atlarge-lists.icann.org
> https://atlarge-lists.icann.org/mailman/listinfo/apac-discuss
>
> Homepage for the region: http://www.apralo.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://atlarge-lists.icann.org/pipermail/apac-discuss/attachments/20180329/74f6b6b1/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 300327 bytes
Desc: not available
URL: <http://atlarge-lists.icann.org/pipermail/apac-discuss/attachments/20180329/74f6b6b1/image-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 80240 bytes
Desc: not available
URL: <http://atlarge-lists.icann.org/pipermail/apac-discuss/attachments/20180329/74f6b6b1/image-0003.png>