DNSSEC Key Signing Key rollover postponed
2009-12-16
In deference to upcoming changes in our DNSSEC signing environment, .SE will for practical reasons postpone the KSK key rollover which usually takes place by the turn of the year until later during Spring 2010.
In practice it doesn’t bring any technical difficulties to those who uses .SE as a Trust Anchor.
The key generated 2008 (Key id = 49678) will be unvalid from 2010-01-01 and will be removed 2010-02-01 whereas the key generated 2009 (Key id 8779) will continuously be in use to sign the .SE-zone during 2010 or until anything else is announced.
Keys are available through IANA’s ITAR https://itar.iana.org/ They are also available at https://www.iis.se/docs/ksk.txt
We do advice you to subscribe to the dnssec-announce@lists.nic.se mailing list to get notified about key rollovers and any other important changes.
Questions may be addressed to dnssec-info@iis.se.
