RSSAC003 was published on 21 August 2015. All RSSAC publications can be found at https://www.icann.org/groups/rssac/documents.


Recommendation DescriptionCurrent Phase
Recommendation 1To address the DNSSEC problems identified in Section 6.4, the RSSAC recommends the Root Zone Management partners to increase the signature validity periods for signatures generated by both the KSK and the ZSK. KSK signature validity should be increased to at least 21 days. ZSK signature validity should be increased to at least 13 days.

CLOSED

  • No labels