Public Comment is a vital part of our multistakeholder model. It provides a mechanism for stakeholders to have their opinions and recommendations formally and publicly documented. It is an opportunity for the ICANN community to effect change and improve policies and operations.
هذا المحتوى متوفر فقط باللغة (أو اللغات)
Agree to include the algorithm roll of the ZSK as part of the proposal, rather than adjusting the bit length of the ZSK (reducing from 2048 to 1536; it is necessary to clarify that 1536 is not a common RSA key length).
In the algorithm selection section, it is necessary to note the algorithm for KSK-2024. After all, it is already 2026, and the literal meaning suggests that it is the name of a key with the ECDSA P-256 algorithm.
The operation of dumping keys is inherently insecure. Importing and exporting keys is not recommended. If HSM devices are to be replaced, the process may also follow key rollover or algorithm rollover procedures.
When ICANN reviews TLD transition plans, it always mentions recursive caching and waiting for TTL expiration in the DNSSEC transition content, but there is no content related to waiting for TTL expiration in this proposal at all.