Thursday, 28 September 2017 13:22

DNS key change delayed


A scheduled cryptographic key change for DNSSEC has been delayed, partly because of a software issue.

ICANN had scheduled its first-ever DNSSEC zone signing key (ZSK) change for 11 October, but that event has been postponed.

The original ZSK was generated in 2010, but that 1024-bit key is now the weak link in the signing chain. The top-level key signing key (KSK) is already 2048-bit, and the ZSK is being brought up to the same standard.

The longer key increases the size of responses from domain name servers, so careful testing was required to make sure DNS software could cope. DNS is central to the operation of the Internet, as it is the component that links human-readable domains such as to the IP address of the relevant server.

But ICANN has determined that "a significant number of resolvers used by Internet service providers and network operators are not yet ready for the key rollover".

In particular, one widely used resolver is not accepting automatic key updates, but other issues include improperly configured software.

"The security, stability and resiliency of the domain name system is our core mission. We would rather proceed cautiously and reasonably, than continue with the roll on the announced date of 11 October," said ICANN chief executive Göran Marby.

"It would be irresponsible to proceed with the roll after we have identified these new issues that could adversely affect a significant number of end users."

ICANN believes that number could be as high as 750 million, a quarter of the Internet community. Not all users are affected, because not all DNSes use DNSSEC.

The key roll has been tentatively rescheduled for 1Q18, but the new date will be announced "as appropriate".

Marby added: "It's our hope that network operators will use this additional time period to be certain that their systems are ready for the key roll."

Subscribe to ITWIRE UPDATE Newsletter here


The much awaited iTWire Shop is now open to our readers.

Visit the iTWire Shop, a leading destination for stylish accessories, gear & gadgets, lifestyle products and everyday portable office essentials, drones, zoom lenses for smartphones, software and online training.

PLUS Big Brands include: Apple, Lenovo, LG, Samsung, Sennheiser and many more.

Products available for any country.

We hope you enjoy and find value in the much anticipated iTWire Shop.



iTWire TV offers a unique value to the Tech Sector by providing a range of video interviews, news, views and reviews, and also provides the opportunity for vendors to promote your company and your marketing messages.

We work with you to develop the message and conduct the interview or product review in a safe and collaborative way. Unlike other Tech YouTube channels, we create a story around your message and post that on the homepage of ITWire, linking to your message.

In addition, your interview post message can be displayed in up to 7 different post displays on our the site to drive traffic and readers to your video content and downloads. This can be a significant Lead Generation opportunity for your business.

We also provide 3 videos in one recording/sitting if you require so that you have a series of videos to promote to your customers. Your sales team can add your emails to sales collateral and to the footer of their sales and marketing emails.

See the latest in Tech News, Views, Interviews, Reviews, Product Promos and Events. Plus funny videos from our readers and customers.


Stephen Withers

Stephen Withers is one of Australia¹s most experienced IT journalists, having begun his career in the days of 8-bit 'microcomputers'. He covers the gamut from gadgets to enterprise systems. In previous lives he has been an academic, a systems programmer, an IT support manager, and an online services manager. Stephen holds an honours degree in Management Sciences and a PhD in Industrial and Business Studies.

Share News tips for the iTWire Journalists? Your tip will be anonymous




Guest Opinion

Guest Reviews

Guest Research

Guest Research & Case Studies

Channel News