tptacek - the root keys <i>will</i> remain RSA-keyed for some time.  The root Key Signing Key (KSK) is 2048-bit RSA.  The root Zone Signing Keys (ZSKs) that are CHANGED every 3 months (a ZSK key ceremony is in fact happening <i>TODAY</i>) are 1024-bit RSA.<p>There was strong interest in changing the algorithm when the KSK is rolled (when that occurs is still to be decided), but for the moment an algorithm change will not be part of that.<p>I don&#x27;t deny that deployment of ED25519 will take some time.  Once approved it has to be integrated into the signing software.  It&#x27;s also got to be integrated into the validation side.   It&#x27;s going to take time.  So lets get started!