<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.title, li.title, div.title
{mso-style-name:title;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.subtitle, li.subtitle, div.subtitle
{mso-style-name:subtitle;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.docdate, li.docdate, div.docdate
{mso-style-name:docdate;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=WordSection1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>For all those interested in DNSSEC here is the direct link to
the ICANN website where everything seats:<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><a href="http://www.root-dnssec.org/">http://www.root-dnssec.org/</a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>For the signing ceremony that just took place yesterday, our
region was represented by volunteers (and we thank them also here) and I would
like to thank the Organization Internationale de la Francophonie and NSRC for
helping us in the process of getting volunteers there. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>FRANCAIS:<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Pour tout ceux qui voudraient tout voir sur DNSSEC, voila le
lien direct du site de ICANN :<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><a href="http://www.root-dnssec.org/"><span lang=FR>http://www.root-dnssec.org/</span></a></span><span
lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>A l’occasion de la cérémonie de signatures qui s’est
tenu hier, notre région a été représentée par des volontaires (merci a tous
ceux qui sont venus). Je voudrais remercier l’Organisation Internationale
de la Francophonie et NSRC, pour nous avoir aidé dans le processus de représentation.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>AR<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
africann-bounces@afrinic.net [mailto:africann-bounces@afrinic.net] <b>On Behalf
Of </b>Anne-Rachel Inné<br>
<b>Sent:</b> Thursday, June 17, 2010 9:27 AM<br>
<b>To:</b> africann@afrinic.net<br>
<b>Subject:</b> [AfrICANN-discuss] Major Milestone for the Internet and ICANN<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div id=doctitle>
<p class=title>Major Milestone for the Internet and ICANN<o:p></o:p></p>
<p class=subtitle>The KSK Key Signing Ceremony is Now Complete<o:p></o:p></p>
<p class=docdate>16 June 2010<o:p></o:p></p>
</div>
<p>Today in the small town of Culpeper, Virginia, ICANN technical staff played
host to an unusual and somewhat arcane event. Volunteers from over ten
countries made their way by plane, train and automobile to witness and
participate in the generation of the cryptographic key that will be used to
secure the root zone of the Domain Name System using DNSSEC for the first time.<o:p></o:p></p>
<p>During the ceremony, participants were present within a secure facility and
witnessed the preparations required to ensure that the so-called
key-signing-key (KSK) was not only generated correctly, but that almost every
aspect of the equipment, software and procedures associated with its generation
were also verified to be correct and trustworthy. The ceremony was conducted
with the goal of ensuring that there is widespread confidence throughout the
technical Internet community that the root zone, once signed, can be relied
upon to protect users from false information.<o:p></o:p></p>
<p>Ceremony participants referred to an extremely detailed checklist and were
able to confirm that every aspect of the process was executed exactly as
planned. The entire event was video-recorded simultaneously by three separate
cameras, and ICANN arranged for the whole system to be subject to a SysTrust
audit, a process supported by the archived, unedited video footage and the
legal attestations of key participants.<o:p></o:p></p>
<p>The path down the long road to Culpeper has required considerable effort and
investment by ICANN, and has benefited from an extremely productive
collaboration between staff at ICANN, VeriSign and the US Department of
Commerce. ICANN, with the help of some talented consultants, has designed
processes that are thought to surpass those of many commercial Certificate
Authorities not only in the degree of openness and transparency in their design
and execution, but also in terms of the security engineering involved.<o:p></o:p></p>
<p>The design of the overall system requires ICANN to execute a ceremony like
this one four times per year. The next ceremony is scheduled to take place on
July 12 in El Segundo, California, where ICANN has built a second facility
intended to ensure continuity for the DNS (and hence Internet users world-wide)
in the event of a serious disaster in one location.<o:p></o:p></p>
<p>All design documentation for the ceremony will be published by ICANN, not
only to promote transparency in the process for the root zone, but also to act
as a valuable reference to any other organization that needs to build similar
systems to support DNSSEC in top-level domains, enterprises, or anywhere else.
The deployment of DNSSEC in the root zone of the DNS will hence not only act as
a catalyst for global DNSSEC deployment because of the special nature of the
root zone, but also because of the design and engineering investment ICANN is
giving back to the wider community.<o:p></o:p></p>
</div>
</body>
</html>