.dk zone DNSSEC NSEC3 parameter change

Scheduled Maintenance Report for .dk

Completed

The scheduled maintenance has been completed.

Posted Mar 22, 2023 - 10:30 CET

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Mar 22, 2023 - 10:00 CET

Scheduled

During the scheduled maintenance the following DNSSEC signing parameters will be changed:

- NSEC3 ”Opt-Out” flag will be deactivated.
- Number of NSEC3 hashing iterations is changed from 17 to 0 (zero).
- NSEC3 ”salt” will be removed.

The change is expected to last 30 minutes. Changes to the .dk zone carried out in the same time period are issued immediately after completion of the parameter change.

The mentioned changes are done in the interest of following best practice (BCP) defined in RFC 9276/BCP 236.

Posted Mar 13, 2023 - 12:02 CET

This scheduled maintenance affected: DNS (.dk) (a.nic.dk, b.nic.dk, c.nic.dk, d.nic.dk, l.nic.dk, p.nic.dk, s.nic.dk).