It is practically the end of the Internet for some subscribers as the Nigerian Communications Commission (NCC) said it has received notification of upcoming changes to an important security configuration parameter related to root zone, if not implemented by some network operators.
The NCC made this known in a press release made available to TheNewsGuru. The press statement was signed by the NCC Director of New Media and Information Security, Engr. Haru Al-Hassan.
According to the statement, the Internet Corporation of Assigned Names and Numbers (ICANN) informed the NCC of the upcoming change to the important security configuration parameter related to the root zone, which is scheduled to take place on 11th October, 2017.
TheNewsGuru reports the ICANN is an international organization, non-profit corporation that has responsibility for Internet protocol (IP) address space allocation, protocol Identifier assignment, generic (gTLD) and country code (ccTLD) Top-level Domain name system management, and root server system management functions.
The root zone key signing key (KSK) will be changed in a process called a key rollover, which is the first change since the Domain Name System Extentions (DNSSEC) was enabled in 2010.
“This change must be widely and carefully coordinated by network operators with ICANN,” NCC said in the statement.
According to the statement, “Network Operators that have already enabled DNSSEC validation on their network must update their system with the new KSK in order to avoid disruption of users’ access to the Internet service from 11th October 2017”.
NCC said “Network Operators who have not yet enabled DNSSEC validation will not be affected by the ICANN KSK change and does not require any system update on their network as the ICANN KSK change will not affect their users’ access to the Internet service”.
It, however, noted that “The Network Operators who have not enabled DNSSEC validation and are intending to enable DNSSEC validation after ICANN KSK change on 11th October 2017 must obtain the new key from ICANN for DNSSEC validation implementation”.
“The ICANN’s testing platform to confirm Network Operators infrastructure’s support of the new KSK can be found at https://go.icann.org/KSKtest and any question can be directed to email@example.com,” NCC said.