[dns-wg] Algorithm Upgrade for RIPE NCC DNS Zones

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear colleagues,

All the zones maintained by the RIPE NCC are signed with the RSA/SHA1
algorithm. At the RIPE 70 meeting we committed to upgrade the
algorithm of all our zones.

We required an updated version of our signer software that could sign
a zone with two different algorithms at the same time. We then needed
to test it, to ensure that we could switch algorithms without causing
major validation errors. We published a RIPE Labs article about our
experiences here:

https://labs.ripe.net/Members/anandb/dnssec-algorithm-roll-over

We are happy to announce that we are now ready to roll the keys of all
our zones and sign them with the RSA/SHA256 algorithm. We will follow
the process described in the RIPE Labs article. We plan to begin the
roll-over on Monday, 30 November 2015. We would still like to exercise
caution, so we will not roll the keys of all zones at the same time.
We will do this in batches, starting with a small number of reverse
DNS zones of the RIPE Meeting address space.

If you have any questions, please send an email to <dns at ripe.net>.

Regards,

Anand Buddhdev
RIPE NCC
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=/Pwl
-----END PGP SIGNATURE-----