Announcing KSK rollover for .dk

From: Erwin Lansing <>
Date: Mon, 27 Oct 2014 15:08:51 +0100

On Monday November 3rd, 2014, DK Hostmaster will change the DNSSEC key for the dk zone, a so-called KSK rollover.

The current key, id 26887, has been in use ever since the .dk zone was signed in Juli 2010 and will now be changed for security reasons.

The new key has id 61294:

;KSK DS record (SHA1):

dk. 86400 IN DS 61294 8 1 035241f6e7edfcbcc8d28cbe9bb0d9f28a99874e

;KSK DS record (SHA256):

dk. 86400 IN DS 61294 8 2 7512abc9f08f74085d4aec9e7cc6dc402a689f146f9aafdae11fce5d3adca25e

If you’re validating DNSSEC directly with DK Hostmaster’s key, please add the new key before the rollover, after which the old key can be removed after a transition period. Vi do recommend to validate against the root zone instead.

Not relevant for the common user

This rollover is only relevant for those who run their own DNS infrastructure with DNSSEC validation. Domain owners with a DNSSEC signed domain do not need to change anything; your ISP will take care of it for you.

Med venlig hilsen/Best Regards
Erwin Lansing
Network and System Administrator
DK Hostmaster A/S
Kalvebod Brygge 45, 3. sal
1560 København V
Tlf.      33 64 60 60
Fax.:     33 64 60 66
.dk Danmarks plads på Internettet
This is an email from DK Hostmaster A/S. This message may contain
confidential information and is intended solely for the use of the
intended addressee. If you are not the intended addressee please notify
the sender immediately and delete this e-mail from your system. You are
not permitted to disclose, distribute or copy the information in this
Received on Mon Oct 27 2014 - 15:08:51 CET

This archive was generated by hypermail 2.3.0 : Tue Mar 24 2020 - 08:55:01 CET