Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
The DNSSEC Root Signing Ceremony (cloudflare.com)
23 points by marshblocker on Feb 26, 2025 | hide | past | favorite | 2 comments


  > Finally, the Ceremony Administrator can sign the KSR with the private key-signing key. He enters “Y” on a command prompt, and the dramatic portion of the ceremony is complete.
Nerds, man. I love it.

Title should contain a "(2015)" tag though, as this blog post was written about the 22nd ceremony:

https://www.iana.org/dnssec/ceremonies/22

Last ceremony, the 56th, was held on February 12[1]; next is on April 24[2].

[1] https://www.iana.org/dnssec/ceremonies/56

[2] https://www.iana.org/dnssec/ceremonies/57


I will never get tired (I guess until, in some speculative future, it stops being true) that these root keys could land on Pastebin and nobody would need to be paged --- I think it is still literally the case that nobody's operational security depends on DNSSEC.

https://sockpuppet.org/blog/2016/10/27/14-dns-nerds-dont-con...




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: