- dns-wg - mailman.ripe.net

ROW#10 - Final call for proposals
by Edward Lewis 07 May '21

07 May '21

ROW#10: Register now & submit your proposal before May 14th, 2021 The 10th Registration Operations Workshop [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…> (ROW#10) is scheduled to take place via remote participation on June 8th, 2021, 13:00 - 16:00 UTC. IMPORTANT: Registration is required to enable participation! Those interested in attending the virtual meeting are required to register at the following link in order to receive the access information for the online session: https://regiops.net/events/row10registration/ [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/events/row10registration/__;…> Please note that the call for presentation and panel proposals is still active. Proposals in the form of a short abstract shall be submitted to row(a)viagenie.ca<mailto:row@viagenie.ca>. Deadline is May 14th, 2021. Discussions of workshop topics may also take place on the regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> mailing list. In keeping with the Registration Operations' focus of the ROW, possible topics for this session could be: • RDAP implementation experience • DNS abuse • DNS privacy and encryption • Differentiated access • Authentication and authorization • Credential Security/Credential Management • DNSSEC operationalization (CSYNC, managing transfers of secured domains) • Registration support functions (data escrow/business continuity) • Automation • Other innovative uses for registration and resolution technologies Please feel free to disseminate this Call to other lists where it might be of interest. We look forward to your participation! For additional event details and previous ROW sessions, please visit https://regiops.net [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…>. ROW Program Committee Stay tuned for further updates! Follow @ROW_by_Viagenie [twitter.com]<https://urldefense.com/v3/__https:/twitter.com/ROW_by_Viagenie?ref_src=twsr…> ROW website: https://regiops.net [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…> Contact us: row(a)viagenie.ca<mailto:row@viagenie.ca> ROW mailing list: regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> ROW series: co-sponsored by Verisign [verisign.com]<https://urldefense.com/v3/__https:/www.verisign.com/__;!!PtGJab4!r-G1XoSaep…> & ICANN<https://www.icann.org/>, organized by Viagenie [viagenie.ca]<https://urldefense.com/v3/__http:/viagenie.ca/__;!!PtGJab4!r-G1XoSaepHjvn9S…> (cross-posting to multiple lists - sorry for any duplicates)

1 0

Re: [dns-wg] European Resolver Policy
by Andrew Campling 28 Apr '21

28 Apr '21

On Wed, Apr 28, 2021 at 15:55, Stephane Bortzmeyer <bortzmeyer(a)nic.fr> wrote > Note that despite its name, it is not an "european policy", it is just an individual work developed in Europe. (Hey, I will rebrand my blog as "the European Blog".) My apologies if I wasn't clear on the call but this statement is incorrect: the policy document is indeed the result of collaboration across the tech and telecoms sectors, with input from a wide range of people. It is intended to provide a policy suited for European resolver operators, noting that anyone is welcome to apply it in other geographies should they feel that it is suitable. > Indeed, and the so-called "European Resolver Policy" does not have any advantage over RFC 8932 (a good document, I suggest all resolver operators should read it). The documents address different requirements and you will note that the European Resolver Policy recommends that resolver operators adopt the practices documented in Section 5 of RFC 8932. > And some negative, too, for instance when it asks resolvers to be lying resolvers by default. Otherwise, it brings very little new content. This may be a reference to the recommendation that resolver operators take care "in offering DNS resolution without malicious content protection or the blocking of child sexual abuse material as a default option to non-expert end-users such as consumers unless it is unlawful to provide such protections"? It is unclear to me why anyone would wish to offer non-expert users a service that recklessly increases their exposure to harmful or illegal content, although I note that some in the tech sector disagree. > No. Instead, the DNS WG should raise awareness about RFC 7626 and RFC 8932. In addition to reading RFC 8932 itself, anyone wanting more information may be interested to know that one of the co-authors of the document joined my weekly call on encrypted DNS a few weeks ago; you can hear her talk about the document in the second half of the call at https://419.consulting/encrypted-dns/f/mozilla-trr-consultation-dns-privacy. Andrew

1 0

European Resolver Policy
by Brett Carr 28 Apr '21

28 Apr '21

Those of you who were on the WG Call last week will of seen Andrew Campling from 419 Consulting give a presentation on the newly developed European Resolver policy. https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions/remo… This is an attempt to get resolver operators to operate in a standard way safeguarding the privacy of their users, some of the content is based around: RFC 8932 Recommendations for DNS Privacy Service Operators This policy document has already received some positive feedback and some organisations have already come out in support. My view is this kind of policy would be more likely to get traction if it had the rubber stamp of a well known organisation behind it, and so I had two ideas to try and make this happen. 1. DNS WG Members review the policy, provide feedback to the authors for potential updates/changes and then when we are happy it is rubber stamped as approved by the RIPE DNS WG 2. Andrew (and other volunteers), turn this into a RIPE Document format which the WG then discuss and modify as needed and then that goes through the process to ratify it as an official RIPE Document. I’d be very happy to hear other members views on whether either of the above are a good/bad idea or If there is another approach we should take or indeed if the WG should not take this on as a work item at all for any reason. Thanks Brett -- Brett Carr Manager DNS Engineering Nominet UK

2 1

DNS WG Online session on Wed 21 April at 15:00 CEST
by Dave Knight 22 Apr '21

22 Apr '21

Colleagues, Our next DNS Working Group Remote Session is on Wednesday 21 April at 15:00 CEST (13:00 UTC) Agenda: - European Resolver Policy, Andrew Campling - Update on RSSAC activities, Lars-Johan Liman Zoom details: Topic: DNS Working Group - Meeting Time: Apr 21, 2021 03:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/97218499787?pwd=TUR3RlhUV0xoM3RNSmpvNUFlVHhkUT09 Meeting ID: 972 1849 9787 Passcode: 945425 One tap mobile +31207940854,,97218499787# Netherlands +31207946519,,97218499787# Netherlands Dial by your location +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +31 707 006 526 Netherlands +31 20 241 0288 Netherlands +1 301 715 8592 US (Washington DC) +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) Meeting ID: 972 1849 9787 Find your local number: https://ripe.zoom.us/u/abkLWf7Udk Join by SIP 97218499787(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (Amsterdam Netherlands) 213.244.140.110 (Germany) 103.122.166.55 (Australia Sydney) 103.122.167.55 (Australia Melbourne) 149.137.40.110 (Singapore) 64.211.144.160 (Brazil) 69.174.57.160 (Canada Toronto) 65.39.152.160 (Canada Vancouver) 207.226.132.110 (Japan Tokyo) 149.137.24.110 (Japan Osaka) Meeting ID: 972 1849 9787 Passcode: 945425 Kind regards, dave

2 2

New on RIPE Labs: Understanding the European Resolver Policy
by Alun Davies 20 Apr '21

20 Apr '21

Dear colleagues, The European Resolver Policy is intended to provide reassurance to end-users and other stakeholders that personal data gained in the operation of DNS resolution services will not be misused. In this guest post on RIPE Labs, Andrew Campling talks about the aims and benefits of the policy: https://labs.ripe.net/author/andrew_campling/understanding-the-european-res… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

2 1

Registration Operations Workshop #10
by Edward Lewis 19 Apr '21

19 Apr '21

ROW#10: Register now & submit your proposal June 8th, 2021 | 13:00 - 16:00 UTC | Zoom Video Conference ROW#10<https://regiops.net> will be held via remote participation on June 8th, 2021, 13:00 - 16:00 UTC. Check additional time zones here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=ROW#10&iso=202106…>. Registration is NOW available at: https://regiops.net/events/row10registration/ ROW's Program Committee has also opened the call for presentation and panel proposals and is interested in: 1. Topic related presentation proposals. 2. Topic suggestions for focused panel discussions. 3. Suggestions for additional topics. In the past, workshops have included discussions focused on Extensible Provisioning Protocol (EPP), WHOIS, Registry Lock, Registration Data Access Protocol (RDAP) and many more. Below is a non-exhaustive list of possible topics for this session. • RDAP implementation experience • DNS abuse • DNS privacy and encryption • Differentiated access • Authentication and authorization • Credential Security/Credential Management • DNSSEC operationalization (CSYNC, managing transfers of secured domains) • Registration support functions (data escrow/business continuity) • Automation • Other innovative uses for registration and resolution technologies Please email a short abstract describing your proposal to row(a)viagenie.ca<mailto:row@viagenie.ca> We also encourage discussions/suggestions for additional topics on ROW’s mailing list regiops(a)googlegroups.com<mailto:regiops@googlegroups.com>. Important dates: • Deadline to submit proposals: May 14th, 2021 • Program Committee to notify selected authors by May 21st, 2021 • Speaker agreements and materials required from selected presenters by May 31st, 2021 We hope that you can join us and request that you disseminate this Call to other lists where it might be of interest. ROW Program Committee Stay tuned for further updates! Follow @ROW_by_Viagenie<https://twitter.com/ROW_by_Viagenie?ref_src=twsrc%5Etfw> ROW website: http://regiops.net<http://regiops.net/> Contact us: row(a)viagenie.ca<mailto:row@viagenie.ca> ROW mailing list: regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> ROW series: co-sponsored by Verisign<https://www.verisign.com/> & ICANN<https://www.icann.org/>, organized by Viagenie<http://viagenie.ca/> (cross-posting to multiple lists - sorry for any duplicates)

1 0

Call for contributions
by Dave Knight 09 Apr '21

09 Apr '21

Hi all, We have our last remote session prior to RIPE 82 coming up on Wednesday, April 21st, and our session at RIPE 82 on Wednesday, May 21st. We're currently seeking contributions for both of those. Presentations and suggestions for discussion topics are always welcome, recent operational experiences and observations are particularly encouraged. Please send your ideas to the DNS WG Chairs at <dns-wg-chair(a)ripe.net> You can find an archive of our previous sessions at https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions Thanks and kind regards, dave for the dns wg chairs

1 1

New on RIPE Labs: Measuring DNS over TLS from the Edge
by Alun Davies 29 Mar '21

29 Mar '21

Dear colleagues, In a study aimed at understanding the availability of DoT and how it performs for end users, Trinh Viet Doan and colleagues have been measuring DoT adoption, reliability, and response times with RIPE Atlas. Read the results on RIPE Labs: https://labs.ripe.net/Members/trinh_viet_doan/measuring-dns-over-tls-from-t… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

New on RIPE Labs: Trufflehunter - A New Tool to Sniff Out DNS Usage
by Alun Davies 22 Mar '21

22 Mar '21

Dear colleagues, Measuring domain usage on centralised public DNS resolvers can be very useful, but it's also pretty hard to do. Trufflehunter is a new open source tool that puts snooping techniques to good use in order to accurately estimate the popularity of domains. Read all about it on RIPE Labs: https://labs.ripe.net/Members/audrey_randall/a-new-tool-to-sniff-out-dns-us… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

Automatic update of DNSSEC data in the RIPE Database
by Anand Buddhdev 19 Mar '21

19 Mar '21

Dear colleagues, Some time ago, our community asked us to implement the automatic update of delegation signer (DS) records of secure delegations in the reverse DNS zones maintained by RIPE NCC. We are pleased to announce that we have implemented RFC 7344 and RFC 8078. We will begin the automatic updates on Thursday 25th May. You can read more about this in our reverse DNS configuration documentation here: https://www.ripe.net/manage-ips-and-asns/db/support/configuring-reverse-dns… At the RIPE DNS working group session on the 24th of February 2021, Ondřej Caletka presented about this topic. A recording of the session is also available for viewing here: https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions/remo… If you have any questions or concerns, please send email to dns(a)ripe.net. Regards, Anand Buddhdev RIPE NCC

1 1