6 ms·
The DNSSEC Root Signing Ceremony
- nickburns 2y ago> Finally, the Ceremony Administrator can sign the KSR with the private key-signing key. He enters “Y” on a command prompt, and the dramatic portion of the ceremony is complete. Nerds, man. I love it. Title should contain a "(2015)" tag though, as this blog post was written about the 22nd ceremony: https://www.iana.org/dnssec/ceremonies/22 https://www.iana.org/dnssec/ceremonies/22 Last ceremony, the 56th, was held on February 12[1]; next is on April 24[2]. [1] https://www.iana.org/dnssec/ceremonies/56 https://www.iana.org/dnssec/ceremonies/56 [2] https://www.iana.org/dnssec/ceremonies/57 https://www.iana.org/dnssec/ceremonies/57
- tptacek 2y agoI will never get tired (I guess until, in some speculative future, it stops being true) that these root keys could land on Pastebin and nobody would need to be paged --- I think it is still literally the case that nobody's operational security depends on DNSSEC. https://sockpuppet.org/blog/2016/10/27/14-dns-nerds-dont-control-the-internet/ https://sockpuppet.org/blog/2016/10/27/14-dns-nerds-dont-con...