Public Comment is a vital part of our multistakeholder model. It provides a mechanism for stakeholders to have their opinions and recommendations formally and publicly documented. It is an opportunity for the ICANN community to effect change and improve policies and operations.
Submissions for this Proceeding
Draft Report of the Root Zone DNSSEC Algorithm Rollover Study
View this Proceeding
My Submissions
Search Public Comment Submissions For This Proceeding
To search for keywords within Public Comment submissions documents or pages, type in the keyword and press Enter after each selection.
Submission Summary:
The Domain Name System Security Extensions (DNSSEC) have enabled resolvers, applications and other relying parties to validate DNS data for more than a decade. During that time, following recommended practices for cryptography, DNSSEC key signing and zone signing keys have been updated at various frequencies throughout the DNS hierarchy, including the root, and DNSSEC signature algorithms have been changed occasionally as well, with the first ...
Submission Summary:
Overall, the RySG is supportive of the general concept of the DNSSEC Algorithm Rollover to improve the cryptographic algorithm used in the signing of the DNS root zone. While the RySG has confidence in the current algorithm, we also recognize the need to avoid complacency and to adopt a stronger algorithm before it is strictly needed.
Regarding the content in the Study, the RySG offers specific comments.
Submission Summary:
The RSSAC reviewed the draft report and it does not have any comments.
Submission Summary:
We have reviewed the Root Zone Algorithm Rollover Study (Draft) dated 19 October 2023. We think the report provides sensible advice and addresses the scope of what the design team was asked to consider. We think the report provides a solid foundation on which detailed, technical implementation plans can be developed, and we encourage ICANN and other stakeholders to proceed with that work without delay.
We include some additional comments...
Submission Summary:
I would wish to give thanks to the teams involved in this change. The approaches and methodologies are excellent. The level of implementation plan is excellent and risks are well looked at.
However, I have a concern,
1. How does ICANN implements these initiatives in regards to technical implementation?
2. Are there environments where the changes are first deployed and tested?
3. If there are, which approach worked in th...
Submission Summary:
more detail of the consequences of FIPS-120 operating mode change should be made.
new HSM hardware and ceremony changes should be bedded in before the algorithm change.
more reference to measurement before, during and after algorithm change should be made.