On May 5th 2010, ICANN will complete the upgrade of the last DNS Root server to support DNSSEC. This upgrade will attach a digital signature to every response from the root servers where the DNS resolver is configured to request a signed response. More information on DNSSEC can be found at http://www.dnssec.net/

Twelve of the thirteen root servers have already been upgraded and ICANN have not identified any harmful effects of the DNSSEC upgrade.

Node4 have carried out tests on their DNS servers and are confident that customers should not experience any problems using this service. Node4 are encouraging all their customers to perform their own checks on equipment that DNS traffic will flow through on the way to and from their equipment to ensure the larger packet sizes do not cause any problems. Particular attention should be paid to any devices that perform traffic inspection such as firewalls or security enabled routers.

An easy to use tool to check for any issues that might arise as part of the DNSSEC upgrades can be found at http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues

If you experience any problems with regard to the DNSSEC upgrade please contact the helpdesk via email at support@node4.co.uk