DLV Replaced With Signed Empty Zone (original) (raw)

This afternoon, at the DNS-OARC 27th workshop in San Jose, CA, Dan Mahoney of ISC replaced the contents of dlv.isc.org with an empty signed zone.

The DLV was conceived as a temporary transition service, to enable DNSSEC adoption. We have been announcing in various venues since early 2015 that we would be decommissioning the DLV. Finally, we have done it.

We will continue to host an empty signed zone at dlv.isc.org, so that resolvers that query the zone won’t continue retrying.

BEFORE

DNSSEC Look-Aside Validation Registry screenshot, showing active zone statistics and DNSKEY statistics

TRANSITION

DNSSEC Look-Aside Validation Registry screenshot, showing 'Public announcement of DLV turndown' text

AFTER

Terminal window projected on a screen, showing dlv.isc.org being replaced by an empty signed zone