RSSAC003: RSSAC Report on Root Zone TTLs

RSSAC003: RSSAC Report on Root Zone TTLs

RSSAC003 was published on 21 August 2015. All RSSAC publications can be found at https://www.icann.org/groups/rssac/documents.

 

Recommendation 

Description

Current Phase

Recommendation 

Description

Current Phase

Recommendation 1

To address the DNSSEC problems identified in Section 6.4, the RSSAC recommends the Root Zone Management partners to increase the signature validity periods for signatures generated by both the KSK and the ZSK. KSK signature validity should be increased to at least 21 days. ZSK signature validity should be increased to at least 13 days.

Closed