Consultation on Root Zone KSK Rollover

The Internet Assigned Numbers Authority (IANA) Functions contract (SA1301-­12-­CN-­0035) between ICANN and the United States Department of Commerce, National Telecommunications Information Administration (NTIA) to perform services related to certain interdependent Internet technical management functions calls for a public consultation from all interested and affected parties to help satisfy the following objective:

C.2.9.2.f Root Domain Name System Security Extensions (DNSSEC) Key Management –The Contractor shall be responsible for the management of the root zone Key Signing Key (KSK), including generation, publication, and use for signing the Root Keyset. As delineated in the Requirements at Appendix 2 entitled Baseline Requirements for DNSSEC in the Authoritative Root Zone  that is incorporated by reference herein as if fully set forth. The Contractor shall work collaboratively with NTIA and the Root Zone Maintainer, in the performance of this function.

More specifically, this consultation involves "Appendix 2: Baseline Requirements for DNSSEC in the Authoritative Root Zone," that articulates the contract requirement to perform a scheduled root zone KSK rollover.

The consultation is being conducted using the ICANN Public Comment Process, consistent with the contract requirements. The feedback received during this consultation will inform the Root Zone Management Partners on the subject of KSK rollover, so that a schedule and a detailed implementation plan for KSK rollovers can be established.

ICANN, consistent with the terms of the IANA functions contract, is committed to executing a KSK rollover in the root zone and now seeks public feedback with respect to developing a detailed scheduling and implementation plan.

Comments are welcome on any aspect of KSK management related to KSK rollover, and specifically on the following questions:

1. What prerequisites need to be considered prior to a first scheduled KSK rollover?
2. When should the first scheduled KSK rollover take place?
3. What should the IANA Functions Operator (ICANN) and the other Root Zone Management Partners do to gauge the technical and end-user impact of a KSK rollover following the first scheduled KSK rollover?
4. How often should a scheduled KSK rollover take place, following the first one?
5. How far should the published calendar for scheduled KSK rollovers extend into the future?
6. What public notification should take place in advance of a scheduled KSK rollover?
7. What other considerations are necessary for the Root Zone Management Partners to take into consideration prior, during, and after a planned key roll over?

Please refer to the document, "Consultation on Root Zone KSK Rollover" [PDF, 371 KB]

Please refer to the document, "Consultation on Root Zone KSK Rollover" [PDF, 371 KB]

None

• Report