Re: [dnsext] Re: Signing the root with SHA-1 by Sep 1st

Paul Vixie <vixie@isc.org> Tue, 01 September 2009 17:51 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A79E3A7033; Tue, 1 Sep 2009 10:51:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.568
X-Spam-Level:
X-Spam-Status: No, score=-2.568 tagged_above=-999 required=5 tests=[AWL=0.031, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BlbsQ1Z3FXaJ; Tue, 1 Sep 2009 10:51:26 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 5A45028C8E0; Tue, 1 Sep 2009 10:51:26 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1MiXSb-0004mR-8z for namedroppers-data0@psg.com; Tue, 01 Sep 2009 17:48:01 +0000
Received: from [2001:4f8:3:bb:230:48ff:fe5a:2f38] (helo=nsa.vix.com) by psg.com with esmtps (TLSv1:CAMELLIA256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from <vixie@vix.com>) id 1MiXSX-0004lk-7o for namedroppers@ops.ietf.org; Tue, 01 Sep 2009 17:47:58 +0000
Received: from nsa.vix.com (localhost [127.0.0.1]) by nsa.vix.com (Postfix) with ESMTP id E9377B4D40 for <namedroppers@ops.ietf.org>; Tue, 1 Sep 2009 17:47:56 +0000 (UTC) (envelope-from vixie@nsa.vix.com)
From: Paul Vixie <vixie@isc.org>
To: namedroppers@ops.ietf.org
Subject: Re: [dnsext] Re: Signing the root with SHA-1 by Sep 1st
In-Reply-To: Your message of "Tue, 01 Sep 2009 13:22:28 -0400." <4A9D5854.3030105@gmail.com>
References: <4A7DC199.9040700@gmail.com> <4A9D5854.3030105@gmail.com>
X-Mailer: MH-E 8.1; nil; GNU Emacs 22.2.1
Date: Tue, 01 Sep 2009 17:47:56 +0000
Message-ID: <35668.1251827276@nsa.vix.com>
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

> Date: Tue, 01 Sep 2009 13:22:28 -0400
> From: William Allen Simpson <william.allen.simpson@gmail.com>
> ...
> ... The root did not begin running DNSsec today.
> Does anybody have a fixed date in writing?

craftily, there is no one person who could put such a thing in writing,
and therefore noone who can be personally blamed for doing it, or not
doing it.  we're signing the root by invisible consensus, where anyone
who knows where the dependencies are is bound to secrecy lest they be
removed from the loop.

estimates heard floating on the wind are, december of 2009.