Skip to content

The DNSSEC Root Signing Ceremony

cloudflare.com
23 pointsmarshblocker2 comments
On HN

Comments

  > Finally, the Ceremony Administrator can sign the KSR with the private key-signing key. He enters “Y” on a command prompt, and the dramatic portion of the ceremony is complete.
Nerds, man. I love it.

Title should contain a "(2015)" tag though, as this blog post was written about the 22nd ceremony:

https://www.iana.org/dnssec/ceremonies/22

Last ceremony, the 56th, was held on February 12[1]; next is on April 24[2].

[1] https://www.iana.org/dnssec/ceremonies/56

[2] https://www.iana.org/dnssec/ceremonies/57

I will never get tired (I guess until, in some speculative future, it stops being true) that these root keys could land on Pastebin and nobody would need to be paged --- I think it is still literally the case that nobody's operational security depends on DNSSEC.

https://sockpuppet.org/blog/2016/10/27/14-dns-nerds-dont-con...

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.