DK Hostmaster changes DNSSEC key

From: Erwin Lansing <erwin_at_dk-hostmaster.dk>
Date: Wed, 28 Oct 2015 17:29:33 +0100

DK Hostmaster will change the DNSSEC key for the dk zone, a so-called KSK rollover, early November.

The current key, id 61294, has been in use for one year and will now be changed for operational and security reasons.

The new key has id 25055:

;DS record (SHA1):
dk. 86400 IN DS 25055 8 1 29d37b78da21c4c0baaf84b7ee3b3529951fd689

;DS record (SHA256):
dk. 86400 IN DS 25055 8 2 9cfc79a705a6fd1ec2fe6d81faad85ebbda8eb30eb7d4c7f3dea09587f0844f1

If you’re validating DNSSEC directly with DK Hostmaster’s key, please add the new key before the rollover, after which the old key can be removed after a transition period. Vi do recommend to validate against the root zone instead.

This rollover is only relevant for those who run their own DNS infrastructure with DNSSEC validation. Domain owners with a DNSSEC signed domain do not need to change anything; your ISP will take care of it for you.


-- 
Med venlig hilsen/Best Regards
Erwin Lansing
Network and System Administrator
DK Hostmaster A/S
Kalvebod Brygge 45, 3. sal
1560 København V
Tlf.      33 64 60 60
Fax.:     33 64 60 66
Email:    erwin_at_dk-hostmaster.dk <mailto:erwin_at_dk-hostmaster.dk>
Homepage: http://www.dk-hostmaster.dk <http://www.dk-hostmaster.dk/>
.dk Danmarks plads på Internettet
-------------------------------------------------------------------------
This is an email from DK Hostmaster A/S. This message may contain
confidential information and is intended solely for the use of the
intended addressee. If you are not the intended addressee please notify
the sender immediately and delete this e-mail from your system. You are
not permitted to disclose, distribute or copy the information in this
e-mail.
--------------------------------------------------------------------------
Received on Wed Oct 28 2015 - 17:29:33 CET

This archive was generated by hypermail 2.3.0 : Tue Mar 24 2020 - 08:55:02 CET