Skip to main content

Webinar: The KSK Rollover Delay and Next Steps

LOS ANGELES – 4 October 2017 – The Internet Corporation for Assigned Names and Numbers (ICANN) today announced it will host an interactive webinar entitled, "The Root KSK Rollover Delay: Examination and Next Steps."

The webinar will be conducted by Matt Larson, Vice President of Research in ICANN's Office of the Chief Technology Officer.

Larson will be joined in the webinar by Duane Wessels, Distinguished Engineer at Verisign, Inc. Wessels has compiled data about the readiness of resolvers for the upcoming root KSK roll.

The root zone KSK is the most important cryptographic key that helps protect the Domain Name System (DNS). The key was originally scheduled to be changed or "rolled" on 11 October 2017. On 27 September, the organization announced that after analyzing new data, it had decided to postpone the roll. The new data indicated that too many Internet Service Providers (ISPs) and Network Operators were simply not ready for the changing of the key and ICANN didn't want to take a chance that the end Internet users of those operators would lose connectivity with the DNS.

Larson will also talk about what comes next in terms of determining a new date for the changing of the key.  

In order to facilitate global participation, interpretation services will be available in Arabic, Chinese, French, Portuguese, Russian, and Spanish. Participants will have the opportunity to ask questions at the end of the session. During the course of the webinar, participants may submit questions using the chat function in Adobe Connect.

In advance of the webinar, questions may be submitted to We will make every effort to answer the questions during the webinar or via email shortly afterwards. Please submit your requests no later than Monday, 9 October.

A recording of the webinar will be made available for future reference.

To learn more about the Key roll, go here:

Webinar Details & How to Attend

Date: 11 October 2017

Time: 1500 – 1600 UTC

Join via Adobe Connect

To join via phone, dial in on one of the number listed here. After you are connected, enter one of the following language codes:

English – Participant Code: 9001
Français – Participant Code: 9002
Español – Participant Code: 9003
中文 – Participant Code: 9004
Pусский – Participant Code: 9005
العربية – Participant Code: 9006
Português – Participant Code: 9007

More Announcements
Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as"""" is not an IDN."