Matthijs Mekking <matth...@pletterpet.nl> wrote: > I am not sure how they executed the algorithm rollover precisely. > Particularly, were there ever two DS records in the root zone with > different algorithms for these zones?
I can answer that :-) Algorithm rollovers have to be double-KSK rollovers because DS records have to have a subset of the algorithms of the DNSKEY records. Having both algorithms in the DS record can only slow down the rollover so it's hard to think of situations where it would make sense (other than Shumon's multi-provider disagreement!) [ For normal KSK rollovers I think double-DS is slightly better since it allows smaller DNSKEY RRset sizes, tho it requires more parent zone updates. ] --- root.db +++ root.db @@ -1,4 +1,4 @@ -. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2018082001 1800 900 604800 86400 +. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2018082002 1800 900 604800 86400 . 518400 IN NS a.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS c.root-servers.net. @@ -2096,7 +2096,7 @@ br. 172800 IN NS d.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS f.dns.br. -br. 86400 IN DS 45673 5 2 14369AD309CC59FD59C1A422BA93B71F2C522BF3672C2E067B2C53F5 3AE522DF +br. 86400 IN DS 2471 13 2 5E4F35998B8F909557FA119C4CBFDCA2D660A26F069EF006B403758A 07D1A2E4 a.dns.br. 172800 IN A 200.160.0.10 a.dns.br. 172800 IN AAAA 2001:12ff::10 b.dns.br. 172800 IN A 200.189.41.10 --- root.db +++ root.db @@ -1,4 +1,4 @@ -. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2017121400 1800 900 604800 86400 +. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2017121401 1800 900 604800 86400 . 518400 IN NS a.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS c.root-servers.net. @@ -11638,6 +11638,7 @@ ns3.pknic.net.pk. 172800 IN A 199.192.75.54 root-s.pknic.pk. 172800 IN A 119.81.34.90 pl. 172800 IN NS a-dns.pl. +pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS c-dns.pl. pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS e-dns.pl. @@ -11648,6 +11649,8 @@ pl. 86400 IN DS 14075 8 2 4D12B53E0A179C5E51719F606FC429EA03F444CDF5370FBBEEB6ECEB 21E99F2B a-dns.pl. 172800 IN A 194.181.87.156 a-dns.pl. 172800 IN AAAA 2001:a10:121:1::156 +b-dns.pl. 172800 IN A 192.195.72.53 +b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 c-dns.pl. 172800 IN A 93.190.128.146 c-dns.pl. 172800 IN AAAA 2a02:38:14::146 d-dns.pl. 172800 IN A 81.15.133.186 @@ -13124,7 +13127,7 @@ se. 172800 IN NS i.ns.se. se. 172800 IN NS j.ns.se. se. 172800 IN NS x.ns.se. -se. 86400 IN DS 59747 5 2 44388B3DE9A22CAFA8A12883F60A0F984472D0DFEF0F63ED59A29BE0 18658B28 +se. 86400 IN DS 59407 8 2 67A8E06FCEFDD9397F77F26C41ADE4EC142F299BCFA1827F0EF8FD87 F2F63022 nsa.netnod.se. 172800 IN A 194.58.192.33 nsa.netnod.se. 172800 IN AAAA 2a01:3f1:33::53 nsp.netnod.se. 172800 IN A 194.58.198.33 Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ Cape Wrath to Rattray Head including Orkney: Mainly westerly or southwesterly 3 or 4, occasionally 5 in north. Smooth or slight in east, moderate or rough in north, occasionally very rough at first in far north. Fair then occasional rain or drizzle, fog patches developing in north. Moderate or good, becoming moderate, occasionally very poor in north. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
