FYI: DNSSEC Key Signing Key Rollover

[Sam Lanfranco]

NCSG Colleagues,

Just FYI, here is the U.S. Department of Homeland Security US-Computer 
Emergency Readiness Team (US-CERT)
  announcement on ICANN's DNSSEC Key Signing Key Rollover.



-------- Forwarded Message --------
Subject: 	DNSSEC Key Signing Key Rollover
Date: 	Thu, 27 Sep 2018 19:14:36 -0500
From: 	US-CERT <US-CERT at ncas.us-cert.gov>
Reply-To: 	US-CERT at ncas.us-cert.gov
To: 	samlanfranco@



DNSSEC Key Signing Key Rollover

U.S. Department of Homeland Security US-CERT

National Cyber Awareness System:

DNSSEC Key Signing Key Rollover 
<https://www.us-cert.gov/ncas/current-activity/2018/09/27/DNSSEC-Key-Signing-Key-Rollover>
09/27/2018 07:52 PM EDT

Original release date: September 27, 2018

On October 11, 2018, the Internet Corporation for Assigned Names and 
Numbers (ICANN) will be changing the Root Zone Key Signing Key (KSK) 
used in the Domain Name System (DNS) Security Extensions (DNSSEC) protocol.

DNSSEC is a set of protocol extensions used to digitally sign DNS 
information, an important part of preventing domain name hijacking. 
Updating DNSSEC KSK is a crucial security step in ensuring 
DNSSEC-validating DNS resolvers continue to function after the rollover. 
While DNSSEC validation is mandatory for federal agencies 
<https://rollready.dnsops.gov/FISMA-dnssec.html>, it is not required of 
the private sector. Organizations that do not use DNSSEC validation will 
be unaffected by the rollover.

NCCIC encourages administrators to update their DNSSEC KSK before 
October 11, 2018. See the NIST/NTIA Roll Ready site 
<https://rollready.dnsops.gov/> and the ICANN Root Zone KSK Rollover 
resources page <https://www.icann.org/resources/pages/ksk-rollover> for 
more information.

------------------------------------------------------------------------

This product is provided subject to this Notification 
<http://www.us-cert.gov/privacy/notification> and this Privacy & Use 
<http://www.us-cert.gov/privacy/> policy.

------------------------------------------------------------------------
A copy of this publication is available at www.us-cert.gov 
<https://www.us-cert.gov>. If you need help or have questions, please 
send an email to info at us-cert.gov <mailto:info at us-cert.gov>. Do not 
reply to this message since this email was sent from a notification-only 
address that is not monitored. To ensure you receive future US-CERT 
products, please add US-CERT at ncas.us-cert.gov to your address book.

OTHER RESOURCES:
Contact Us <http://www.us-cert.gov/contact-us/> | Security Publications 
<http://www.us-cert.gov/security-publications> | Alerts and Tips 
<http://www.us-cert.gov/ncas> | Related Resources 
<http://www.us-cert.gov/related-resources>

STAY CONNECTED:
Sign up for email updates 
<http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new>

SUBSCRIBER SERVICES:
Manage Preferences 
<http://public.govdelivery.com/accounts/USDHSUSCERT/subscribers/new?preferences=true>  | 
Unsubscribe 
<https://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/one_click_unsubscribe?verification=5.0b1a8f984ba4be05765dfdbb5726b2ed&destination=samlanfranco%40thebrocasgroup.com>  | 
Help <https://subscriberhelp.govdelivery.com/>

------------------------------------------------------------------------
This email was sent to samlanfranco@ using GovDelivery Communications 
Cloud on behalf of: United States Computer Emergency Readiness Team 
(US-CERT) · 245 Murray Lane SW Bldg 410 · Washington, DC 20598 · (888) 
282-0870 	GovDelivery logo 
<https://insights.govdelivery.com/Communications/Subscriber_Help_Center>


-- 
-----------------------------------------------
"It is a disgrace to be rich and honoured
in an unjust state" -Confucius
  邦有道，贫且贱焉，耻也。邦无道，富且贵焉，耻也
------------------------------------------------
Visiting Prof, Xi'an Jaiotong-Liverpool Univ, Suzhou, China
Dr Sam Lanfranco (Prof Emeritus), Econ, York U., CANADA
email: samlanfranco at thebrocasgroup.com  Skype: slanfranco
blog:  https://samlanfranco.blogspot.com
Phone: +1 613-476-0429 cell: +1 416-816-2852



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ncsg.is/pipermail/ncsg-discuss/attachments/20180928/245c0d98/attachment.htm>