{"id":18061,"date":"2022-06-23T18:08:50","date_gmt":"2022-06-23T18:08:50","guid":{"rendered":"https:\/\/prensa.lacnic.net\/news?p=18061"},"modified":"2023-04-21T17:33:41","modified_gmt":"2023-04-21T17:33:41","slug":"witnessing-the-signing-of-the-uy-zone","status":"publish","type":"post","link":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/","title":{"rendered":"Witnessing the Signing of the .UY Zone"},"content":{"rendered":"\n<p>By <a href=\"https:\/\/prensa.lacnic.net\/news\/en\/author\/carlos-martinez\">Carlos Mart\u00ednez<\/a>, LACNIC CTO<\/p>\n\n\n\n<p>.UY, the Uruguayan TLD, updated its zone signatures using its Key Signing Key (KSK), a cryptographic key that allows signing the Domain Name System (DNS) zone and thus strengthening the system and increasing the trustworthiness of the Internet.<\/p>\n\n\n\n<p>The KSK is used to digitally sign the set of zone-signing keys. Just as all other top-level domains (TLDs), .UY is responsible for signing its space using DNSSEC.<\/p>\n\n\n\n<p>A globally accepted and recommended practice is to update the signatures, rolling over the keys. DNS signatures are peculiar in that their validation requires the help of the root.<\/p>\n\n\n\n<p>A key rollover involves generating a new pair of cryptographic keys and distributing the new public key globally to all DNSSEC validating resolvers. This is a significant change, as every Internet query that uses DNSSEC relies on the KSK of the root zone to validate its destination.<\/p>\n\n\n\n<p>If the root zone KSK is not up to date, the DNSSEC validating DNS resolvers cannot resolve DNS queries.<\/p>\n\n\n\n<p>The mechanism that is used consists of dividing signatures in two parts: the ZSK (any change in your zone) and the KSK, which is the key used to build the trust chain upwards from .UY.<\/p>\n\n\n\n<p>In the case of Uruguay, the key is updated every five years. The KSK is used to generate ZSKs; typically, twice the number of keys that are needed are generated.<\/p>\n\n\n\n<p>The ceremony during which the new keys were generated in Uruguay was held at the Pocitos Data Center, where the hardware security module (HSM) server rack is located.<\/p>\n\n\n\n<p>Who was present during the ceremony? Two crypto officers (each with a USB flash drive), a notary, and five witnesses were present for reasons of transparency.<\/p>\n\n\n\n<p>The HSM (a board inside the server) was turned on, a series of steps were followed, and the final product was the ZSK keys signed with the KSK.<\/p>\n\n\n\n<p>A sort of digital signature was also generated which can be verified and is recorded in the minutes. Thus, anyone who wishes to do so can verify that the correct keys are being used. This adds transparency and guarantees the process.<\/p>\n\n\n\n<p>The new keys were copied to two USB flash drives. One was taken to SECIU, the Central Computer Service of the University of the Republic; the other was stored in a bank vault. This copy of the keys serves as a form of backup to restore the HSM in case the original is destroyed.<\/p>\n\n\n\n<p>The USB flash drive that was taken to SeCIU was used to upload the keys and perform the signing operations.<\/p>\n\n\n\n<p>The same ceremony is held in each territory in the LACNIC service region at the local TLDs.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Carlos Mart\u00ednez, LACNIC CTO .UY, the Uruguayan TLD, updated its zone signatures using its Key Signing Key (KSK), a cryptographic key that allows signing the Domain Name System (DNS) zone and thus strengthening the system and increasing the trustworthiness of the Internet. The KSK is used to digitally sign the set of zone-signing keys. [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":18052,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1321],"tags":[416],"archivo":[1345],"taxonomy-authors":[1198],"tipo_autor":[],"class_list":["post-18061","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dns-en","tag-dns-en","archivo-editions","taxonomy-authors-carlos-martinez-en"],"acf":{"author":"","related_notes":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>LACNIC Blog | Witnessing the Signing of the .UY Zone<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LACNIC Blog | Witnessing the Signing of the .UY Zone\" \/>\n<meta property=\"og:description\" content=\"By Carlos Mart\u00ednez, LACNIC CTO .UY, the Uruguayan TLD, updated its zone signatures using its Key Signing Key (KSK), a cryptographic key that allows signing the Domain Name System (DNS) zone and thus strengthening the system and increasing the trustworthiness of the Internet. The KSK is used to digitally sign the set of zone-signing keys. [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/\" \/>\n<meta property=\"og:site_name\" content=\"LACNIC Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/lacnic\" \/>\n<meta property=\"article:published_time\" content=\"2022-06-23T18:08:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-21T17:33:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"680\" \/>\n\t<meta property=\"og:image:height\" content=\"377\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Gianni\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@lacnic\" \/>\n<meta name=\"twitter:site\" content=\"@lacnic\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/\"},\"author\":{\"name\":\"Gianni\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab\"},\"headline\":\"Witnessing the Signing of the .UY Zone\",\"datePublished\":\"2022-06-23T18:08:50+00:00\",\"dateModified\":\"2023-04-21T17:33:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/\"},\"wordCount\":453,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/blog.lacnic.net\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg\",\"keywords\":[\"DNS\"],\"articleSection\":[\"DNS\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/\",\"url\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/\",\"name\":\"LACNIC Blog | Witnessing the Signing of the .UY Zone\",\"isPartOf\":{\"@id\":\"https:\/\/blog.lacnic.net\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg\",\"datePublished\":\"2022-06-23T18:08:50+00:00\",\"dateModified\":\"2023-04-21T17:33:41+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#primaryimage\",\"url\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg\",\"contentUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg\",\"width\":680,\"height\":377},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/blog.lacnic.net\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Witnessing the Signing of the .UY Zone\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.lacnic.net\/#website\",\"url\":\"https:\/\/blog.lacnic.net\/\",\"name\":\"LACNIC Blog\",\"description\":\"En el Blog de LACNIC encontrar\u00e1s art\u00edculos t\u00e9cnicos vinculados al desarrollo de Internet en la regi\u00f3n de Am\u00e9rica Latina y el Caribe.\",\"publisher\":{\"@id\":\"https:\/\/blog.lacnic.net\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.lacnic.net\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blog.lacnic.net\/#organization\",\"name\":\"LACNIC Blog\",\"url\":\"https:\/\/blog.lacnic.net\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg\",\"contentUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg\",\"caption\":\"LACNIC Blog\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/facebook.com\/lacnic\",\"https:\/\/x.com\/lacnic\",\"https:\/\/www.instagram.com\/lacnic\/?hl=es-la\",\"https:\/\/uy.linkedin.com\/company\/lacnic\",\"https:\/\/www.youtube.com\/user\/lacnicstaff\",\"https:\/\/www.lacnic.net\/podcast\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab\",\"name\":\"Gianni\",\"url\":\"https:\/\/blog.lacnic.net\/en\/author\/gianni\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LACNIC Blog | Witnessing the Signing of the .UY Zone","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/","og_locale":"en_US","og_type":"article","og_title":"LACNIC Blog | Witnessing the Signing of the .UY Zone","og_description":"By Carlos Mart\u00ednez, LACNIC CTO .UY, the Uruguayan TLD, updated its zone signatures using its Key Signing Key (KSK), a cryptographic key that allows signing the Domain Name System (DNS) zone and thus strengthening the system and increasing the trustworthiness of the Internet. The KSK is used to digitally sign the set of zone-signing keys. [&hellip;]","og_url":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/","og_site_name":"LACNIC Blog","article_publisher":"https:\/\/facebook.com\/lacnic","article_published_time":"2022-06-23T18:08:50+00:00","article_modified_time":"2023-04-21T17:33:41+00:00","og_image":[{"width":680,"height":377,"url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg","type":"image\/jpeg"}],"author":"Gianni","twitter_card":"summary_large_image","twitter_creator":"@lacnic","twitter_site":"@lacnic","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#article","isPartOf":{"@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/"},"author":{"name":"Gianni","@id":"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab"},"headline":"Witnessing the Signing of the .UY Zone","datePublished":"2022-06-23T18:08:50+00:00","dateModified":"2023-04-21T17:33:41+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/"},"wordCount":453,"commentCount":0,"publisher":{"@id":"https:\/\/blog.lacnic.net\/#organization"},"image":{"@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg","keywords":["DNS"],"articleSection":["DNS"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/","url":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/","name":"LACNIC Blog | Witnessing the Signing of the .UY Zone","isPartOf":{"@id":"https:\/\/blog.lacnic.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#primaryimage"},"image":{"@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg","datePublished":"2022-06-23T18:08:50+00:00","dateModified":"2023-04-21T17:33:41+00:00","breadcrumb":{"@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#primaryimage","url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg","contentUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg","width":680,"height":377},{"@type":"BreadcrumbList","@id":"https:\/\/blog.lacnic.net\/en\/witnessing-the-signing-of-the-uy-zone\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/blog.lacnic.net\/en\/"},{"@type":"ListItem","position":2,"name":"Witnessing the Signing of the .UY Zone"}]},{"@type":"WebSite","@id":"https:\/\/blog.lacnic.net\/#website","url":"https:\/\/blog.lacnic.net\/","name":"LACNIC Blog","description":"En el Blog de LACNIC encontrar\u00e1s art\u00edculos t\u00e9cnicos vinculados al desarrollo de Internet en la regi\u00f3n de Am\u00e9rica Latina y el Caribe.","publisher":{"@id":"https:\/\/blog.lacnic.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.lacnic.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/blog.lacnic.net\/#organization","name":"LACNIC Blog","url":"https:\/\/blog.lacnic.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/","url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg","contentUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg","caption":"LACNIC Blog"},"image":{"@id":"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/lacnic","https:\/\/x.com\/lacnic","https:\/\/www.instagram.com\/lacnic\/?hl=es-la","https:\/\/uy.linkedin.com\/company\/lacnic","https:\/\/www.youtube.com\/user\/lacnicstaff","https:\/\/www.lacnic.net\/podcast"]},{"@type":"Person","@id":"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab","name":"Gianni","url":"https:\/\/blog.lacnic.net\/en\/author\/gianni\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2022\/06\/testigos-de-la-firma-uy.jpg","jetpack_sharing_enabled":true,"wpml_current_locale":"en_US","wpml_translations":[{"locale":"es_ES","id":18034,"post_title":"Testigos de la firma de la zona .UY \u00a0","slug":"testigos-de-la-firma-de-la-zona-uy","href":"https:\/\/blog.lacnic.net\/testigos-de-la-firma-de-la-zona-uy\/"},{"locale":"pt_BR","id":18043,"post_title":"Testemunhas da assinatura da regi&atilde;o UY","slug":"testemunhas-da-assinatura-da-regio-uy","href":"https:\/\/blog.lacnic.net\/pt-br\/testemunhas-da-assinatura-da-regio-uy\/"}],"_links":{"self":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/18061","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/comments?post=18061"}],"version-history":[{"count":4,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/18061\/revisions"}],"predecessor-version":[{"id":21008,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/18061\/revisions\/21008"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/media\/18052"}],"wp:attachment":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/media?parent=18061"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/categories?post=18061"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/tags?post=18061"},{"taxonomy":"archivo","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/archivo?post=18061"},{"taxonomy":"taxonomy-authors","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/taxonomy-authors?post=18061"},{"taxonomy":"tipo_autor","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/tipo_autor?post=18061"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}