Roll, Roll, Roll your Root:A Comprehensive Analysis of the First Ever DNSSEC Root KSK Rollover

The DNS Security Extensions (DNSSEC) add authenticity and integrity to the naming system of the Internet. Resolvers that validate information in the DNS need to know the cryptographic public key used to sign the root zone of the DNS. Eight years after its introduction and one year after the originally scheduled date, this key was replaced by ICANN for the first time in October 2018. ICANN considered this event, called a rollover, "an overwhelming success" and during the rollover they detected "no significant outages". In this paper, we independently follow the process of the rollover starting from the events that led to its postponement in 2017 until the removal of the old key in 2019. We collected data from multiple vantage points in the DNS ecosystem for the entire duration of the rollover process. Using this data, we study key events of the rollover. These events include telemetry signals that led to the rollover being postponed, a near real-time view of the actual rollover in resolvers and a significant increase in queries to the root of the DNS once the old key was revoked. Our analysis contributes significantly to identifying the causes of challenges observed during the rollover. We show that while from an end-user perspective, the roll indeed passed without major problems, there are many opportunities for improvement and important lessons to be learned from events that occurred over the entire duration of the rollover. Based on these lessons, we propose improvements to the process for future rollovers

West-Nile virus replicon particles infect 293T cells expressing DC-SIGNR

West-Nile virus (WNV) is an arbovirus usually transmitted to humans via a mosquito vector. Infections commonly result in febrile symptoms while rare severe neuroinvasive cases may result in encephalitis or meningitis. Studies have shown that WNV infection efficiency is enhanced by expression of DC-SIGNR on target cells, which normally do not express DC-SIGNR. To investigate WNV tropism, we established 293T kidney epithelial cell lines that stably express vector, DC-SIGNR and mutants of DC-SIGNR that lack the entire carbohydrate-recognition domain (CRD) or lack the C-terminal half of the CRD. We demonstrate successful surface expression of DC-SIGNR and its mutants from stablytransfected 293T cells, but not vector-transfected 293T cells. Further, we show that monoclonal antibody 120604 which binds specifically to the DC-SIGNR CRD binds to DCSIGNR expressing 293T cells, but not to vector nor any of the DC-SIGNR mutants expressing cells. Virus replicon particles (VRPs), replication-incompetent viral particles containing necessary structural proteins for infection and a viral plasmid including a GFP reporter are used to safely and conveniently study viral entry. Entry assays using WNV (NY99) VRPs as well as a variant of WNV (NY99) which contains the beta-lactamase enzyme show significant entry into DC-SIGNR expressing cell lines, but not in controls that do not express DC-SIGNR. Additionally, we show that WNV VRPs do not enter DC-SIGNR expressing cells that lack the CRD or the C-terminal half of the CRD suggesting that the Cterminal half of the CRD is required for successful entry of WNV via DC-SIGNR. Future experiments may be able to shed light on which amino acids are required for entryhttps://openriver.winona.edu/urc2018/1057/thumbnail.jp