- dns-wg - mailman.ripe.net

OARConline 32b Workshop, August 11th, Registration and Call for Contributions now open
by Ralph Dolmans 15 Jul '20

15 Jul '20

OARC is hosting an online meeting on August 11th, 13:00 - 15:00 UTC. The Programme Committee is seeking contributions from the community. All DNS-related subjects are welcome, and we remain interested in content which is timely and operationally relevant in light of the COVID-19 pandemic. Suggestions for discussion topics are also very welcome. As the session is limited to 2 hours we'd like to encourage brevity; presentations should not be longer than 20 minutes (this does not include time for questions). **Workshop Milestones:** * 30 Jun 2020 - Submissions open via Indico * 23 Jul 2020 - Deadline for submission (23:59 UTC) * 30 Jul 2020 - Initial Contribution list published * 4 Aug 2020 - Full agenda published * 6 Aug 2020 - Deadline for slideset submission * 11 Aug 2020 - OARConline 32b Workshop The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc32b> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Additional information for speakers of OARConline 32b: * your talk will be broadcast live and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting * you will be expected to attend a rehearsal some time in the two weeks running up to the workshop. We will work with all accepted speakers on a convenient time for all. It would be very useful to have your slides (even if draft) ready for this. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Ralph Dolmans, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 1

8 July online RIPE DNS working group session
by Joao Luis Silva Damas 07 Jul '20

07 Jul '20

Dear RIPE DNS Working Group, We have a RIPE DNS working group scheduled for 8 July, our last before the Summer break. This one will be at our normal time of 15:00 CEST / 13:00 UTC. We're continuing our mix of topics with a different approach to the second half of the session (SEE BELOW, item #2) Agenda: 1) A framework for registration data directory services Steve Crocker, Shinkuro 2) An open discussion on current DNS topics. In order to foster an open discussion we will be collecting topics of interest until July 7th, followed by short doodle during the morning of July 8th to pick the 3 most voted topics. The session will then go over these with 1-2 people framing the subject and an open invitation to all attendees to express their views. We will attempt to manage this as we do a normal microphone queue at a RIPE Meeting. Thanks! João, for the dns-wg chairs ___________________________ Here is the Zoom session information: Topic: DNS Working Group - Meeting Time: Jul 8, 2020 03:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/94175989905?pwd=aGxmamxhRmdveGVjVTFkdG9KRmxFUT09 <https://ripe.zoom.us/j/94175989905?pwd=aGxmamxhRmdveGVjVTFkdG9KRmxFUT09> Meeting ID: 941 7598 9905 Password: 634195 One tap mobile +31207946520,,94175989905# Netherlands +31207947345,,94175989905# Netherlands Dial by your location +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +31 707 006 526 Netherlands +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) +1 301 715 8592 US (Germantown) +1 312 626 6799 US (Chicago) Meeting ID: 941 7598 9905 Find your local number: https://ripe.zoom.us/u/acxQmGWDdu <https://ripe.zoom.us/u/acxQmGWDdu> Join by SIP 94175989905(a)zoomcrc.com <mailto:94175989905@zoomcrc.com> Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (EMEA) 103.122.166.55 (Australia) 209.9.211.110 (Hong Kong SAR) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 941 7598 9905 Password: 634195

1 1

Survey: How Do You Configure DNS Resolvers?
by Petr Špaček 26 Jun '20

26 Jun '20

Dear colleagues, in case you did not see it yet there is an article about survey among DNS resolver operators: https://labs.ripe.net/Members/petr_spacek/survey-how-do-you-configure-dns-r… It describes problems caused by lack of feedback from DNS resolver operators and invites people to participate in the survey. The survey closes on Tuesday 2020-06-30. Have a nice weekend! -- Petr Špaček @ CZ.NIC

1 0

Contributions for July 8th RIPE DNS WG session
by Dave Knight 22 Jun '20

22 Jun '20

Hi all, We're looking for contributions for the next DNS working group online session, scheduled on Wednesday 8th July. All DNS topics are welcome, though we're particularly interested in content which is timely and operationally relevant. Presentations are ideally around 20 minutes, with 10 minutes for discussion. Please send your ideas, preferably with a brief abstract to <dns-wg-chairs(a)ripe.net> by July 1st. Thanks! dave, for the dns-wg chairs

1 0

New on RIPE Labs: What Can the DNS Tell Us About the Effect of Working From Home on the Internet?
by Mirjam Kuehne 12 Jun '20

12 Jun '20

Dear colleagues, Please see this interesting article by João Damas on RIPE Labs: https://labs.ripe.net/Members/joao_luis_silva_damas/what-can-the-dns-tell-u… Kind regards, Mirjam Kühne RIPE NCC

1 0

17 June online RIPE DNS working group session
by Shane Kerr 10 Jun '20

10 Jun '20

Dear RIPE DNS Working Group, We have a RIPE DNS working group scheduled for 17 June. This one will be back at our normal time of 15:00 CEST / 13:00 UTC. We're continuing our mix of topics that are relevant right now as well as ones that involve a a longer time frame. Agenda: The NXNSAttack Vulnerability Ralph Dolmans, NLnetLabs, and Lior Shafir, Tel Aviv University The Impact of Post Quantum Cryptography on DNSSEC Moritz Müller, SIDN Here is the Zoom session information: Topic: DNS Working Group - Meeting Time: Jun 17, 2020 03:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/95128617451?pwd=VldsdFZEUFAvQTVVVWN0MDkrd3lHZz09 Meeting ID: 951 2861 7451 Password: 386451 One tap mobile +31207947345,,95128617451# Netherlands +31202410288,,95128617451# Netherlands Dial by your location +31 20 794 7345 Netherlands +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) +1 301 715 8592 US (Germantown) +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) Meeting ID: 951 2861 7451 Find your local number: https://ripe.zoom.us/u/aqyjKJgxn Join by SIP 95128617451(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (EMEA) 103.122.166.55 (Australia) 209.9.211.110 (Hong Kong SAR) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 951 2861 7451 Password: 386451 I look forward to seeing y'all there. Cheers, -- Shane

1 0

New on RIPE Labs: Managing the Trust Anchor of the DNS against Adversity
by Mirjam Kuehne 09 Jun '20

09 Jun '20

Dear colleagues, Kim Davies, President of PTI and Vice President of IANA Services for ICANN describes recent and new challenges when managing the DNS trust anchor: https://labs.ripe.net/Members/mirjam/managing-the-trust-anchor-of-the-dns-a… This article is an updated version of a presentation Kim recently gave to the DNS Working Group about DNSSEC Root Key Signing Key (KSK) ceremonies, the challenges to run those ceremonies and some thoughts on how to improve the processes in the future. Kind regards, Mirjam Kühne RIPE NCC

1 0

27 May online RIPE DNS working group session
by Shane Kerr 25 May '20

25 May '20

Dear RIPE DNS Working Group, We have a RIPE DNS working group session scheduled for 7 May. NOTE: This is at a different time than the previous two sessions. We will have this session at 13:00 CEST / 11:00 UTC. Agenda: DNS and IPv6 João Damas, APNIC and Geoff Huston, APNIC Changes to .ORG Signing Joe Abley, PIR and Suzanne Woolf, PIR Here is the Zoom session information: Topic: DNS Working Group - Meeting Time: May 27, 2020 01:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/94381810950?pwd=MGVOUm9MZmNxZktqUGgyVktMaEVKQT09 Meeting ID: 943 8181 0950 Password: 768956 One tap mobile +31202410288,,94381810950# Netherlands +31207940854,,94381810950# Netherlands Dial by your location +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +1 253 215 8782 US (Tacoma) +1 301 715 8592 US (Germantown) +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) Meeting ID: 943 8181 0950 Find your local number: https://ripe.zoom.us/u/abfDz9nHl0 Join by SIP 94381810950(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (EMEA) 103.122.166.55 (Australia) 209.9.211.110 (Hong Kong China) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 943 8181 0950 Password: 768956 I look forward to seeing y'all there! Cheers, -- Shane

1 1

DNSSEC Validation Failures for RIPE NCC Zones
by Anand Buddhdev 25 May '20

25 May '20

Dear colleagues, Yesterday afternoon (21 May 2020), our DNSSEC signer rolled the Zone Signing Keys (ZSKs) of all the zones we operate. Unfortunately, a bug in the signer caused it to withdraw the old ZSKs soon after the new keys began signing the zones. Validating resolvers may have experienced some failures if they had cached signatures made by the old ZSKs. We apologise for any operational problems this may have caused. We are looking at the issue with the developers of our Knot DNS signer to prevent such an occurrence in the future. Regards, Anand Buddhdev RIPE NCC

2 1

New on RIPE Labs: NXNSAttack: Upgrade Resolvers to Stop New Kind of Random Subdomain Attack
by Mirjam Kuehne 21 May '20

21 May '20

Dear colleagues, This article by Petr Špaček of CZ.NIC describes a newly discovered DNS protocol vulnerability that affects all recursive DNS resolvers. NXNSAttack allows the execution of random subdomain attacks using the DNS delegation mechanism, resulting in a big packet amplification factor. Please read more about this on RIPE Labs: https://labs.ripe.net/Members/petr_spacek/nxnsattack-upgrade-resolvers-to-s… Kind regards, Mirjam Kühne RIPE NCC

5 4