Hola!
Por si no lo habían visto... La reunión de DNS-OARC está con streaming live
via youtube en este momento.
Cada sesión cambia la dirección, por lo que sugiero seguir desde su sitio
de Google+:
https://plus.google.com/+DnsoarcNetPlus/
Una vez que hayan terminado las charlas, éstas quedaran guardadas en línea
en el mismo canal de YouTube:
https://www.youtube.com/channel/UCtgW_wIPdA_WBmMKX79JT4g
Saludos!
--
Mauricio Vergara Ereche
Los Angeles, CA
http://mave.cero32.cl
En las ultimas reuniones de LACNIC y LACNOG, se hablo sobre esto y comente
que muchos no estaban listo para el cambio.
No me sorprenden los porcentajes de equipos que no estan actualizados, es
mas diria que en la region puede ser incluso mas alto.
Me toco la opoctunidad de verificar mcuhos DNS de esta parte del mundo y no
estaban prepardos.
Deberiamos poder tomar algun plan de accion proactivo para ayudar a los que
no saben que acciones tomar o todavia no trabajaron en este tema..
Saludos.
Luciano.
El 27 de septiembre de 2017, 22:40, Carlos Marcelo Martinez Cagnazzo <
carlosm3011(a)gmail.com> escribió:
> No tengo mas datos todavia, pero esto recien fue publicado
>
> https://www.icann.org/news/announcement-2017-09-27-en
>
> via Newton Mail
> <https://cloudmagic.com/k/d/mailapp?ct=pi&cv=9.8.55&pv=11.0&source=email_foo…>
>
>
> _______________________________________________
> LACNOG mailing list
> LACNOG(a)lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog
> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>
>
Importante!!!, deifncion del horario para el cambio en la zona raiz.
Saludos.
Luciano.
---------- Forwarded message ----------
From: Matt Larson <matt.larson(a)icann.org>
Date: 2017-09-20 14:25 GMT-03:00
Subject: Operational message: DNS root zone KSK rollover to occur on
October 11, 2017 at 1600 UTC
To: "root-dnssec-announce(a)iana.org" <root-dnssec-announce(a)iana.org>
The root zone management partners, ICANN and Verisign, are working together
to change the DNS root zone's key-signing key (KSK). This process is
referred to as "rolling" the root zone KSK.
The root zone's apex DNSKEY RRset has been signed with the same KSK, known
as KSK-2010, since the root zone was first signed in July, 2010. On October
11, 2017, at approximately 1600 UTC, the root zone will be published with
the apex DNSKEY RRset signed for the first time with a new KSK, known as
KSK-2017. The root zone apex DNSKEY RRset will be signed with only KSK-2017
going forward.
While the specific date of the KSK rollover, October 11, 2017, had been
announced previously, the time of 1600 UTC on that day has not been
announced until now, which is the primary purpose of this message.
The public portion of the root zone KSK is configured as a trust anchor in
software performing DNSSEC validation. The configuration of any software
performing DNSSEC validation will need to be updated to reference KSK-2017
on or before October 11, 2017, or all DNS responses received by that
software will fail DNSSEC validation, resulting ultimately in error
messages to end users. In many cases, software performing DNSSEC validation
supports "Automated Updates of DNS Security", the protocol defined in RFC
5011 that can automatically update a DNSSEC validator's trust anchor
configuration. If the software does not support this protocol, or it is
incorrectly implemented or not configured correctly, the trust anchor will
need to be updated manually.
Anyone operating software performing DNSSEC validation with the root zone
KSK configured as a trust anchor must take action on or before October 11,
2017, to confirm that their software is configured with KSK-2017 as a trust
anchor and, if not, take the necessary steps to update the configuration.
Further information about the root KSK rollover, including information
about how to check and update the trust anchor configuration of popular
recursive resolver implementations that support DNSSEC validation, is
available at https://icann.org/kskroll.
For the root zone management partners,
Matt Larson
VP of Research, ICANN
Duane Wessels
Distinguished Engineer, Verisign
_______________________________________________
root-dnssec-announce mailing list
root-dnssec-announce(a)icann.org
https://mm.icann.org/mailman/listinfo/root-dnssec-announce
Estimad@s, la próxima semana se viene el primer paso (dentro
del DNS) de la rotación de la llave KSK de la raíz. Este
tema es muy importante para los que mantienen DNS resolvedores,
validen o no!
Como prometimos, acá dejamos información que esperemos sea
clara y completa:
http://www.lacnog.org/wg-dns-ksk-rollover/
Espero que les sea de utilidad, y por favor conversemos acá
cualquier duda, sugerencia, comentario, etc.
Por favor compártanlo en sus comunidades!
Saludos y gracias.
Hugo
Estimados Sres.,
Es un gusto saludarlos.
Tenemos el agrado de enviarles el Informe de IETF99 - Praga, 17-21 de
julio de 2017 en español (adjunto).
La traducción fue realizada por LACTLD con la revisión de Hugo Salgado
(nic.cl) a quien LACTLD le agradece.
El informe también está disponible en nuestra página web:
http://www.lactld.org/wp-content/files_mf/ietf2017.pdf
Para acceder a la versión en inglés de este informe ira a Highlights de:
https://centr.org/
Saludos Cordiales,
María Fernanda Alvarez
Oficial de Información / Information Officer
LACTLD - www.lactld.org <http://www.lactld.org>
Casa de Internet de Latinoamérica y el Caribe
Rambla Rep. de México 6125
11400 Montevideo-Uruguay
+598 2604 22 22