- dns-wg - mailman.ripe.net

General survey about situation of website blocking in your country/economy <by July 10th>
by Akira Shibuya 28 Jun '18

28 Jun '18

Dear dns-wg members, JPNIC - Japan Network Information Center is now soliciting your input about the situation of website blocking all over the world, especially from the viewpoint of copyright infringement. In order to cope with vicious infringements, the Japanese government is considering countermeasures including the legislation of website blocking, alleging that blocking technologies are already being operated in many countries and regions of the world(*). JPNIC wants to grasp the real situation of the world. We would be grateful if you could answer the survey below by July 10th. https://docs.google.com/forms/d/e/1FAIpQLSfgxaDgDwHbWOv7RNbHYTRbNHQa_HFCPv0… It would be highly appreciated if you could kindly provide us with your input. (*)Background: Japan calls for 'emergency measure’blocking access to websites that pirate manga and anime https://www.japantimes.co.jp/news/2018/04/13/national/japan-calls-emergency… If you have any question about the survey, please feel free to email us at: web-blocking(a)nic.ad.jp All the Best, Akira Shibuya (on behalf of JPNIC secretariat)

1 0

Call For Presentations - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Anand Buddhdev 26 Jun '18

26 Jun '18

The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted on the first day of the workshop, until 4pm. The second afternoon of the workshop will start with a Members-only session which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. The Members-only session will be followed by the AGM. Workshop Milestones: 15 Jun 2018 - Submissions and Registrations open via Indico 13 Jul 2018 - Deadline for submission 17 Aug 2018 - Contribution list published 14 Sep 2018 - Full agenda published 06 Oct 2018 - Deadline for slideset submission 13 Oct 2018 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/29/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Anand Buddhdev, for the joint Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

SLD .gov.* within european countries
by Antonio Prado 26 Jun '18

26 Jun '18

hi, I hope you can help me on a not-so-related-to-DNS question. does the SLD .gov.* within european countries' ccTLDs identify only central government bodies and not local government or other public administrations as well? thank you -- antonio

17 24

Re: [dns-wg] [dns-operations] Announcement - DNS flag day on 2019-02-01
by Florian Weimer 14 Jun '18

14 Jun '18

* Paul Vixie: > Florian Weimer wrote: > ... >> >> Or you can avoid fragmentation in the first place, ... > > so, just always use tcp if you're expecting more than 1200 octets? Sure, unless it's a special dedicated network etc. >> Theoretically, even with a 1200-byte EDNS buffer size, ... > > but, there are useful answers larger than that. A lot of those answers are artificially inflated with data that clients cannot use anyway. >> Another benefit of this change is that many of the ENDS-related >> problems go away. > > i'd rather we broke everything that won't let edns through. the internet > can't grow in avoidance-mode. we have to confront, too. It's not clear to moe at all what value larger packets provide. You may avoid the occasional TCP transaction. But then there are weird corner cases, such as the difficulty of serving UDP over IPv6 in a stateless fashion, while still supporting fragmentation.

1 0

Announcement - DNS flag day on 2019-02-01
by Petr Špaček 14 Jun '18

14 Jun '18

Dear DNS operators, you might be interested in information about "DNS flag day" coordinated by open-source DNS vendors and is planned for 2019-02-01 (February 1st 2019). Further information can be found on https://dnsflagday.net/ Please post comments related to content of the web site or similar as Github issues: https://github.com/dns-violations/dnsflagday I hope you find the information useful. -- Petr Špaček @ CZ.NIC

3 2

Re: [dns-wg] [dns-operations] Announcement - DNS flag day on 2019-02-01
by Florian Weimer 14 Jun '18

14 Jun '18

* Mark Andrews: >> On 14 Jun 2018, at 6:51 am, Florian Weimer <fw(a)deneb.enyo.de> wrote: >> >> * Petr Špaček: >> >>> you might be interested in information about "DNS flag day" coordinated >>> by open-source DNS vendors and is planned for 2019-02-01 >>> (February 1st 2019). >>> >>> Further information can be found on >>> https://dnsflagday.net/ >> >> Is there still no reduction of EDNS buffer size to around 1200 bytes? >> Isn't it time after ten years to address that particular >> vulnerability? > > If you are talking about fragmentation reassembly attacks you need to > use something with a cryptographic hash independent of EDNS. Or you can avoid fragmentation in the first place, which includes ignoring ICMP Fragmentation Needed But DF Bit Set messages. Unbound does that if you tell it to use it a buffer size which is sufficiently small. Theoretically, even with a 1200-byte EDNS buffer size, there could be IPv4 network paths which trigger fragmentation, but those will be unusual. Another benefit of this change is that many of the ENDS-related problems go away.

1 0

New on RIPE Labs: Dissecting DNS Defenses During DDoS Attacks
by Mirjam Kuehne 31 May '18

31 May '18

Dear colleagues, Please read this new article by Giovane Moura on RIPE Labs: Dissecting DNS Defenses During DDoS Attacks https://labs.ripe.net/Members/giovane_moura/dissecting-dns-defenses-during-… Kind regards, Mirjam Kühne RIPE NCC

1 0

Announcement - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Anand Buddhdev 22 May '18

22 May '18

[with apologies to those who see this on multiple lists] The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. Workshop Milestones: 01 May 2018 - Workshop Announcement 01 Jun 2018 - Submissions and Registrations open via Indico 13 Jul 2018 - Deadline for submission 17 Aug 2018 - Contribution list published 14 Sep 2018 - Full agenda published 06 Oct 2018 - Deadline for slideset submission 13 Oct 2018 - Workshop Anand Buddhdev, on behalf of the joint Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor.

1 0

New on RIPE Labs: Securing DNS Across all of my Devices
by Mirjam Kuehne 17 May '18

17 May '18

Dear colleagues, Please find this new article by Scott Helme on RIPE Labs in which he describes how he is securing the DNS across all of his devices with Pi-Hole + DNS-over-HTTPS + 1.1.1.1: https://labs.ripe.net/Members/scott_helme/securing-dns-across-all-of-my-dev… Kind regards, Mirjam Kühne RIPE NCC

3 2

Revised Draft agenda DNS WG @ RIPE 76
by Joao Damas 03 May '18

03 May '18

Dear all, Here is the *revised* draft agenda and meeting information for the DNS Working Group at the upcoming RIPE 76 meeting in Marseilles (you have already registered, right?) DNS WG at RIPE 76 Slots: Wednesday 16th: 9:00-10:30 Wednesday 16th: 14:00-15:30 Agenda: Administrivia (5 min) Petr Spacek (CZ.NIC): NSEC aggressive caching measurements (30 min) Joao Damas + Geoff Huston (APNIC): Measuring ATR (30 min) Baptiste Jonglez (IMAG): High-performance DNS over TCP (30 min) Moritz Muller (SIDN): DNSSEC rollovers (30 min) RIPE NCC: (15 min) - Colin Petrie(RIPE NCC): Deploying DNS over TLS for the RIPE Meeting - Anand Buddhev: Status report, DNS @ the RIPE NCC Vicky RIsk (ISC): A survey on DNS Privacy(15 min) Sara Dickinson (Sinodun): ‘Latest measurements on DNS Privacy (15 min) Willem Toroop (NLNetLabs): Sunrise DNS-over-TLS! Sunset DNSSEC? - Who needs reasons, when you've got hero?" (20 min) AOB(0-5 min) See you all soon Joao Damas DNS-WG co-chair

1 0