Public Comment

Public Comment is a vital part of our multistakeholder model. It provides a mechanism for stakeholders to have their opinions and recommendations formally and publicly documented. It is an opportunity for the ICANN community to effect change and improve policies and operations.

Contenido disponible solo en los siguientes idiomas

  • English

Submissions for this Proceeding

Draft Report of the Root Zone DNSSEC Algorithm Rollover Study

Search Public Comment Submissions For This Proceeding

To search for keywords within Public Comment submissions documents or pages, type in the keyword and press Enter after each selection.

Draft Report of the Root Zone DNSSEC Algorithm Rollover Study Submission - VeriSign, Inc.
04 December 2023

Submission Summary:

The Domain Name System Security Extensions (DNSSEC) have enabled resolvers, applications and other relying parties to validate DNS data for more than a decade. During that time, following recommended practices for cryptography, DNSSEC key signing and zone signing keys have been updated at various frequencies throughout the DNS hierarchy, including the root, and DNSSEC signature algorithms have been changed occasionally as well, with the first ...


Draft Report of the Root Zone DNSSEC Algorithm Rollover Study Submission - (RySG), Registries Stakeholder Group
01 December 2023

Submission Summary:

Overall, the RySG is supportive of the general concept of the DNSSEC Algorithm Rollover to improve the cryptographic algorithm used in the signing of the DNS root zone.  While the RySG has confidence in the current algorithm, we also recognize the need to avoid complacency and to adopt a stronger algorithm before it is strictly needed.

Regarding the content in the Study, the RySG offers specific comments.


Draft Report of the Root Zone DNSSEC Algorithm Rollover Study Submission - Advisory Committee, Root Server System
01 December 2023

Submission Summary:

The RSSAC reviewed the draft report and it does not have any comments.


Draft Report of the Root Zone DNSSEC Algorithm Rollover Study Submission - Cloudflare
28 November 2023

Submission Summary:

We have reviewed the Root Zone Algorithm Rollover Study (Draft) dated 19 October 2023. We think the report provides sensible advice and addresses the scope of what the design team was asked to consider. We think the report provides a solid foundation on which detailed, technical implementation plans can be developed, and we encourage ICANN and other stakeholders to proceed with that work without delay.

We include some additional comments...


Draft Report of the Root Zone DNSSEC Algorithm Rollover Study Submission - AFRALO
06 November 2023

Submission Summary:

I would wish to give thanks to the teams involved in this change. The approaches and methodologies are excellent. The level of implementation plan is excellent and risks are well looked at.

However, I have a concern,

1. How does ICANN implements these initiatives in regards to technical implementation?

2. Are there environments where the changes are first deployed and tested?

3. If there are, which approach worked in th...


Draft Report of the Root Zone DNSSEC Algorithm Rollover Study Submission - Michaelson, George
23 October 2023

Submission Summary:

more detail of the consequences of FIPS-120 operating mode change should be made.

new HSM hardware and ceremony changes should be bedded in before the algorithm change.

more reference to measurement before, during and after algorithm change should be made.