From Anne-Marie.Eklund-Lowinder at iis.se  Thu Jan  3 13:31:52 2008
From: Anne-Marie.Eklund-Lowinder at iis.se (=?iso-8859-1?Q?Anne-Marie_Eklund-L=F6winder?=)
Date: Mon Jan  7 09:39:20 2008
Subject: [Dnssec-announce] =?iso-8859-1?q?Ny_nyckelsigneringsnyckel_=28KS?=
	=?iso-8859-1?q?K=29_f=F6r_=2ESE_-_New_key_signing_key_=28KSK=29_fo?=
	=?iso-8859-1?q?r_=2ESE_?=
Message-ID: <023E9DDFC555E3479AEBF917CE60A0B401723861@EXCHANGE.office.nic.se>

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Information in English follow

Ny nyckelsigneringsnyckel (KSK) f?r .SE

Fr?n och med idag, 2008-01-03, publicerar och anv?nder .SE en ny KSK
f?r signering av .SE zonfilen. 

Nyckeln fr?n 2006 med key id = 17686 ?r ogiltig sedan 2008-01-01 och
kommer att tas bort 2008-02-01. Ni b?r ha konfigurerat nyckeln f?r
2007 (Key id = 6166) i er resolver och vi rekommenderar er starkt att
ers?tta den med den nya nyckeln (Key id = 49678) senast 2008-12-31. 

F?ljande publika nycklar ?r f?r n?rvarande giltiga f?r .SE:

se.            IN DNSKEY 257 3 5 (
                AwEAAb6xRZHEf+PyF5dxEvz0BHEHbziu6iZaiNW/yjSa
                ZcmrmZiRMF8FPppD+XuKSau0rgu4eBwYdpkEoMVR4FhI
                8frkuPHIue2LP1ETo+2hCrdr60K1538yLvzbOhMxXt6k
                njPN+OlalMmCknadaofKga5FLKOPQs2C3nw6AH4WUNGr
                chmDMVBwRwfZdQXYZTXesqULmGMK7mwjQGOxerRDQWrF
                v8NhNnVV31PihaYBdQ1TJjvfGS/FYZJwv/BddiELiLeU
                nNWu3AOsRAshgOcDBOAPUvKJNEq6RHELFmvXOOe2d8H2
                yzv02EMQik6GwUm16DrSdmX+SWfelQs+9ELFN6k=
                ) ; key id = 6166

se.            IN DNSKEY 257 3 5 (
                AwEAAdKc1sGsbv5jjeJ141IxNSTdR+nbtFn+JKQpvFZE
                TaY5iMutoyWHa+jCp0TBBAzB2trGHzdi7E55FFzbeG0r
                +G6SJbJ4DXYSpiiELPiu0i+jPp3C3kNwiqpPpQHWaYDS
                9MTQMu/QZHR/sFPbUnsK30fuQbKKkKgnADms0aXalYUu
                CgDyVMjdxRLz5yzLoaSO9m5ii5cI0dQNCjexvj9M4ec6
                woi6+N8v1pOmQAQ9at5Fd8A6tAxZI8tdlEUnXYgNwb8e
                VZEWsgXtBhoyAru7Tzw+F6ToYq6hmKhfsT+fIhFXsYso
                7L4nYUqTnM4VOZgNhcTv+qVQkHfOOeJKUkNB8Qc=
                ); key id = 49678

Nycklarna finns ?ven p? http://www.iis.se/domains/sednssec/publickey.

DNS-anv?ndare som ?nnu inte har satt upp sin DNS att fr?ga efter
DNSSEC-svar men har f?r avsikt att g?ra det b?r endast anv?nda de
aktuella nycklarna.

F?r DNS-anv?ndare som inte explicit har satt upp sin DNS att fr?ga
efter DNSSEC-svar kommer det inte att inneb?ra n?gon f?r?ndring.

Vi r?der er att prenumerera p? meddelanden fr?n
dnssec-announce@lists.nic.se f?r att f? information om nyckelbyten
och andra viktiga f?r?ndringar.

Fr?gor kan st?llas till dnssec-info@iis.se.



New key signing key (KSK) for .SE 

As from today, 2008-01-03 .SE publish and take into use a new KSK for
signing the .SE zone file. The key published with start 2006 with key
id = 17686 is unvalid since 2008-01-01 and will be removed
2008-02-01. You should have configured the key published with start
2007 (Key id = 6166) into your resolver and we strongly recommend you
to replace it with the new key published today (Key id = 49678) no
later than 2008-12-31. 

se.            IN DNSKEY 257 3 5 (
                AwEAAb6xRZHEf+PyF5dxEvz0BHEHbziu6iZaiNW/yjSa
                ZcmrmZiRMF8FPppD+XuKSau0rgu4eBwYdpkEoMVR4FhI
                8frkuPHIue2LP1ETo+2hCrdr60K1538yLvzbOhMxXt6k
                njPN+OlalMmCknadaofKga5FLKOPQs2C3nw6AH4WUNGr
                chmDMVBwRwfZdQXYZTXesqULmGMK7mwjQGOxerRDQWrF
                v8NhNnVV31PihaYBdQ1TJjvfGS/FYZJwv/BddiELiLeU
                nNWu3AOsRAshgOcDBOAPUvKJNEq6RHELFmvXOOe2d8H2
                yzv02EMQik6GwUm16DrSdmX+SWfelQs+9ELFN6k=
                ) ; key id = 6166

se.            IN DNSKEY 257 3 5 (
                AwEAAdKc1sGsbv5jjeJ141IxNSTdR+nbtFn+JKQpvFZE
                TaY5iMutoyWHa+jCp0TBBAzB2trGHzdi7E55FFzbeG0r
                +G6SJbJ4DXYSpiiELPiu0i+jPp3C3kNwiqpPpQHWaYDS
                9MTQMu/QZHR/sFPbUnsK30fuQbKKkKgnADms0aXalYUu
                CgDyVMjdxRLz5yzLoaSO9m5ii5cI0dQNCjexvj9M4ec6
                woi6+N8v1pOmQAQ9at5Fd8A6tAxZI8tdlEUnXYgNwb8e
                VZEWsgXtBhoyAru7Tzw+F6ToYq6hmKhfsT+fIhFXsYso
                7L4nYUqTnM4VOZgNhcTv+qVQkHfOOeJKUkNB8Qc=
                ); key id = 49678
 
The keys are also available at
http://www.iis.se/domains/sednssec/publickey.

DNS users that haven't earlier but are going to configure their DNS
to ask for DNSSEC answers should only use the new key.

DNS users that haven't explicitly configured their DNS to ask for
DNSSEC answers this will not involve any changes at all.

We do advice you to subscribe to the dnssec-announce@lists.nic.se
mailing list to get notified about key rollovers and any other
important changes.

Questions may be addressed to dnssec-info@iis.se.


Anne-Marie Eklund L?winder
Quality & Security Manager
.SE (The Internet Infrastructure Foundation)
PO Box 7399, SE-103 91 Stockholm, Sweden
Phone: +46 (0)8-452 35 00/17 
Mobile: +46 (0)734 315 310
E-mail: anne-marie.eklund-lowinder@iis.se 
Web: www.iis.se




-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBR3zjyKXc8AFCsc+UEQK3+QCgnWuy26bScsFvafkp+Hu46RwFI8YAmgPN
e2ACZlMLpzvnqIfWYnonZbpZ
=EZWM
-----END PGP SIGNATURE-----