CZ.NIC has successfully finished the switch to NSEC3

The administrator of the Czech national domain concluded the switch from NSEC to NSEC3 yesterday (24 August) and according to the schedule. This makes CZ.NIC the first registrar in the world to finish the process of changing the signature technology. During the switch to NSEC3, keys have been exchanged in the root zone and pulled down from DLV and ITAR, where keys for the signing of the .CZ zone were stored during the time when the root zone hadn’t been signed. All Internet access providers who wish to validate our national domain using DNSSEC should use only root zone verification from this moment on. All other mechanisms are no longer recommended by CZ.NIC.