No DNSSEC Crypto Key Rollover Oct. 11

min read

(October 3, 2017 – Jarret Cummings) ICANN recently announced that the transition to new cryptographic keys for the Domain Name System Security Extensions (DNSSEC) protocol will not take place on October 11, 2017, as originally planned. Essentially, ICANN concluded that a large number of ISPs and network operators would likely not be ready for the rollover to new security keys in time for the scheduled deployment.

ICANN has not yet set a new date for the process, although its announcement identifies the first quarter of 2018 as the tentative timeframe in which the rollover might occur. ICANN recommends tracking its "Root Zone KSK Rollover" page to stay current with the process as it unfolds. Those particularly impacted by this process may want to register for the KSK Rollover Discussion List.

For more information on the key transition, what it means, and how affected networks should prepare, please see the previous Policy Spotlight post on the information provided by the National Telecommunications and Information Administration (NTIA).


Jarret Cummings is the Director of Policy and Government Relations for EDUCAUSE.