{"id":6601,"date":"2017-04-27T18:36:46","date_gmt":"2017-04-27T18:36:46","guid":{"rendered":"http:\/\/prensa.lacnic.net\/news\/2017abrilen\/root-ksk-rollover"},"modified":"2018-01-19T15:10:59","modified_gmt":"2018-01-19T15:10:59","slug":"root-ksk-rollover","status":"publish","type":"post","link":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/","title":{"rendered":"Root KSK rollover"},"content":{"rendered":"<p>ICANN&nbsp;is planning to perform a&nbsp;Root Zone&nbsp;Domain Name&nbsp;System&nbsp;Security&nbsp;Extensions (DNSSEC) KSK rollover as required in the&nbsp;<a href=\"https:\/\/www.iana.org\/dnssec\/icann-dps.txt\" target=\"_blank\" rel=\"noopener noreferrer\">Root Zone&nbsp;KSK Operator&nbsp;DNSSEC&nbsp;Practice Statement<\/a>.<\/p>\n<p>Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other&nbsp;Domain Name&nbsp;System (DNS) resolver operators;&nbsp;DNS&nbsp;resolver software developers; system integrators; and hardware and software distributors who install or ship the root&#8217;s &#8220;trust anchor.&#8221; The KSK is used to cryptographically sign the Zone Signing Key (ZSK), which is used by the&nbsp;Root Zone&nbsp;Maintainer to&nbsp;DNSSEC-sign the root zone of the Internet&#8217;s&nbsp;DNS.<\/p>\n<p><strong>Maintaining an up-to-date KSK is essential to ensuring<\/strong><strong>&nbsp;<\/strong><strong>DNSSEC-signed domain names continue to validate following the rollover.<\/strong><strong>&nbsp;<\/strong>Failure to have the current root zone KSK will mean that&nbsp;DNSSEC-enabled validators will be unable to verify that&nbsp;DNS&nbsp;responses have not been tampered with and thus will return an error response to&nbsp;<strong>all<\/strong>&nbsp;DNSSEC-signed queries.<\/p>\n<p>\u201cThe root was signed for the first time in 2010 and best practices indicate that cryptographic keys must be changed at reasonable intervals. The root KSK rollover implies a huge challenge due to the scale of the Internet. This rollover process initiated by the community will take place during 2017, and its timing will be handled so that Internet operators will not be affected,\u201d said Carlos Mart\u00ednez, LACNIC CTO and community representative to the Root Signing Ceremony.<\/p>\n<p>More information <a href=\"https:\/\/go.icann.org\/2oamsLx\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/go.icann.org\/2oamsLx<\/a> and <a href=\"http:\/\/bit.ly\/2qh6JHc\" target=\"_blank\" rel=\"noopener noreferrer\">http:\/\/bit.ly\/2qh6JHc<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ICANN&nbsp;is planning to perform a&nbsp;Root Zone&nbsp;Domain Name&nbsp;System&nbsp;Security&nbsp;Extensions (DNSSEC) KSK rollover as required in the&nbsp;Root Zone&nbsp;KSK Operator&nbsp;DNSSEC&nbsp;Practice Statement. Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other&nbsp;Domain Name&nbsp;System (DNS) resolver operators;&nbsp;DNS&nbsp;resolver [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":6552,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[498,499],"tags":[1271],"archivo":[791,1345],"taxonomy-authors":[],"tipo_autor":[],"class_list":["post-6601","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-casa-de-internet-en","category-cybersecurity","tag-cibersecurity","archivo-april-2017-edition","archivo-editions"],"acf":{"author":"","related_notes":null},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>LACNIC Blog | Root KSK rollover<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LACNIC Blog | Root KSK rollover\" \/>\n<meta property=\"og:description\" content=\"ICANN&nbsp;is planning to perform a&nbsp;Root Zone&nbsp;Domain Name&nbsp;System&nbsp;Security&nbsp;Extensions (DNSSEC) KSK rollover as required in the&nbsp;Root Zone&nbsp;KSK Operator&nbsp;DNSSEC&nbsp;Practice Statement. Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other&nbsp;Domain Name&nbsp;System (DNS) resolver operators;&nbsp;DNS&nbsp;resolver [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/\" \/>\n<meta property=\"og:site_name\" content=\"LACNIC Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/lacnic\" \/>\n<meta property=\"article:published_time\" content=\"2017-04-27T18:36:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-01-19T15:10:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png\" \/>\n\t<meta property=\"og:image:width\" content=\"680\" \/>\n\t<meta property=\"og:image:height\" content=\"220\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Gianni\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@lacnic\" \/>\n<meta name=\"twitter:site\" content=\"@lacnic\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/\"},\"author\":{\"name\":\"Gianni\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab\"},\"headline\":\"Root KSK rollover\",\"datePublished\":\"2017-04-27T18:36:46+00:00\",\"dateModified\":\"2018-01-19T15:10:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/\"},\"wordCount\":286,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/blog.lacnic.net\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png\",\"keywords\":[\"Cibersecurity\"],\"articleSection\":[\"Casa de Internet\",\"Cybersecurity\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/\",\"url\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/\",\"name\":\"LACNIC Blog | Root KSK rollover\",\"isPartOf\":{\"@id\":\"https:\/\/blog.lacnic.net\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png\",\"datePublished\":\"2017-04-27T18:36:46+00:00\",\"dateModified\":\"2018-01-19T15:10:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#primaryimage\",\"url\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png\",\"contentUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png\",\"width\":680,\"height\":220},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/blog.lacnic.net\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Root KSK rollover\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.lacnic.net\/#website\",\"url\":\"https:\/\/blog.lacnic.net\/\",\"name\":\"LACNIC Blog\",\"description\":\"En el Blog de LACNIC encontrar\u00e1s art\u00edculos t\u00e9cnicos vinculados al desarrollo de Internet en la regi\u00f3n de Am\u00e9rica Latina y el Caribe.\",\"publisher\":{\"@id\":\"https:\/\/blog.lacnic.net\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.lacnic.net\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blog.lacnic.net\/#organization\",\"name\":\"LACNIC Blog\",\"url\":\"https:\/\/blog.lacnic.net\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg\",\"contentUrl\":\"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg\",\"caption\":\"LACNIC Blog\"},\"image\":{\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/facebook.com\/lacnic\",\"https:\/\/x.com\/lacnic\",\"https:\/\/www.instagram.com\/lacnic\/?hl=es-la\",\"https:\/\/uy.linkedin.com\/company\/lacnic\",\"https:\/\/www.youtube.com\/user\/lacnicstaff\",\"https:\/\/www.lacnic.net\/podcast\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab\",\"name\":\"Gianni\",\"url\":\"https:\/\/blog.lacnic.net\/en\/author\/gianni\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LACNIC Blog | Root KSK rollover","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/","og_locale":"en_US","og_type":"article","og_title":"LACNIC Blog | Root KSK rollover","og_description":"ICANN&nbsp;is planning to perform a&nbsp;Root Zone&nbsp;Domain Name&nbsp;System&nbsp;Security&nbsp;Extensions (DNSSEC) KSK rollover as required in the&nbsp;Root Zone&nbsp;KSK Operator&nbsp;DNSSEC&nbsp;Practice Statement. Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other&nbsp;Domain Name&nbsp;System (DNS) resolver operators;&nbsp;DNS&nbsp;resolver [&hellip;]","og_url":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/","og_site_name":"LACNIC Blog","article_publisher":"https:\/\/facebook.com\/lacnic","article_published_time":"2017-04-27T18:36:46+00:00","article_modified_time":"2018-01-19T15:10:59+00:00","og_image":[{"width":680,"height":220,"url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png","type":"image\/png"}],"author":"Gianni","twitter_card":"summary_large_image","twitter_creator":"@lacnic","twitter_site":"@lacnic","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#article","isPartOf":{"@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/"},"author":{"name":"Gianni","@id":"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab"},"headline":"Root KSK rollover","datePublished":"2017-04-27T18:36:46+00:00","dateModified":"2018-01-19T15:10:59+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/"},"wordCount":286,"commentCount":0,"publisher":{"@id":"https:\/\/blog.lacnic.net\/#organization"},"image":{"@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png","keywords":["Cibersecurity"],"articleSection":["Casa de Internet","Cybersecurity"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/","url":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/","name":"LACNIC Blog | Root KSK rollover","isPartOf":{"@id":"https:\/\/blog.lacnic.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#primaryimage"},"image":{"@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png","datePublished":"2017-04-27T18:36:46+00:00","dateModified":"2018-01-19T15:10:59+00:00","breadcrumb":{"@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#primaryimage","url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png","contentUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png","width":680,"height":220},{"@type":"BreadcrumbList","@id":"https:\/\/blog.lacnic.net\/en\/root-ksk-rollover\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/blog.lacnic.net\/en\/"},{"@type":"ListItem","position":2,"name":"Root KSK rollover"}]},{"@type":"WebSite","@id":"https:\/\/blog.lacnic.net\/#website","url":"https:\/\/blog.lacnic.net\/","name":"LACNIC Blog","description":"En el Blog de LACNIC encontrar\u00e1s art\u00edculos t\u00e9cnicos vinculados al desarrollo de Internet en la regi\u00f3n de Am\u00e9rica Latina y el Caribe.","publisher":{"@id":"https:\/\/blog.lacnic.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.lacnic.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/blog.lacnic.net\/#organization","name":"LACNIC Blog","url":"https:\/\/blog.lacnic.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/","url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg","contentUrl":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2023\/03\/lacnic-blog.svg","caption":"LACNIC Blog"},"image":{"@id":"https:\/\/blog.lacnic.net\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/lacnic","https:\/\/x.com\/lacnic","https:\/\/www.instagram.com\/lacnic\/?hl=es-la","https:\/\/uy.linkedin.com\/company\/lacnic","https:\/\/www.youtube.com\/user\/lacnicstaff","https:\/\/www.lacnic.net\/podcast"]},{"@type":"Person","@id":"https:\/\/blog.lacnic.net\/#\/schema\/person\/1338d9cfdb0137e8bc5581f3771f39ab","name":"Gianni","url":"https:\/\/blog.lacnic.net\/en\/author\/gianni\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/blog.lacnic.net\/wp-content\/uploads\/2017\/04\/ksk.png","jetpack_sharing_enabled":true,"wpml_current_locale":"en_US","wpml_translations":[{"locale":"es_ES","id":6567,"post_title":"Rotaci\u00f3n de la KSK de la Zona Ra\u00edz","slug":"rotacion-de-la-ksk-de-la-zona-raiz","href":"https:\/\/blog.lacnic.net\/rotacion-de-la-ksk-de-la-zona-raiz\/"},{"locale":"pt_BR","id":6603,"post_title":"Rota\u00e7\u00e3o da KSK da Zona Raiz","slug":"rotacao-da-ksk-da-zona-raiz","href":"https:\/\/blog.lacnic.net\/pt-br\/rotacao-da-ksk-da-zona-raiz\/"}],"_links":{"self":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/6601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/comments?post=6601"}],"version-history":[{"count":3,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/6601\/revisions"}],"predecessor-version":[{"id":10076,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/posts\/6601\/revisions\/10076"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/media\/6552"}],"wp:attachment":[{"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/media?parent=6601"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/categories?post=6601"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/tags?post=6601"},{"taxonomy":"archivo","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/archivo?post=6601"},{"taxonomy":"taxonomy-authors","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/taxonomy-authors?post=6601"},{"taxonomy":"tipo_autor","embeddable":true,"href":"https:\/\/blog.lacnic.net\/en\/wp-json\/wp\/v2\/tipo_autor?post=6601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}