News for hackers. Stuff that matters.

A comment on The DNSSEC master key securing DNS is about to change. Parent comment

Re:The DNSSEC master key securing DNS is about to change by CiPHPerCoder on Monday August 29, 2016 @11:34AM (#12382558)
One window of vulnerability is the after-party where everyone with a piece of the signing key drinks cocktails together.
[ Parent | on HN ]
Re:The DNSSEC master key securing DNS is about to change by kijeda on Monday August 29, 2016 @11:43AM (#12382640)
Ceremony attendees don't leave with part of the signing key.

Despite the folklore around these ceremonies that there are 7 people with "the keys to the Internet", those seven only retain a metal key that is used to access a safety deposit box in the ICANN/IANA facility, each of which contains a smart card of which there is an "m-of-n" configuration to activate HSMs containing the actual key.

[ Parent | on HN ]
Re:The DNSSEC master key securing DNS is about to change by CiPHPerCoder on Monday August 29, 2016 @12:59PM (#12383248)
Thanks for the correction. :)
[ Parent | on HN ]