- dns-wg - mailman.ripe.net

new KSK for the root
by Jim Reid 11 Jul '17

11 Jul '17

In case anyone missed this event, the new KSK for the root got added today. Though it’s not signing anything yet. Thanks to everone who made this happen.

1 0

Call for contributions to the RIPE 75 meeting of the DNS wg
by Dave Knight 05 Jul '17

05 Jul '17

Dear colleagues, The RIPE 75 meeting in Dubai is 16 weeks away and we’d like to form a draft agenda soon. Note that in accordance with Dubai Department of Tourism and Commerce Marketing (DTCM) legislation, confirmed speakers are required to submit a colour passport copy, along with a personal profile. More detail is available here: https://ripe75.ripe.net/attend/dctm-requirements As this information is required to be provided one month in advance of the meeting the deadline for submissions is August 20th. Please submit your presentation ideas, or suggestions for discussions to <dns-wg-chairs(a)ripe.net>. Please don’t submit anything using the meeting submission web form, it’s not intended for submission of content to working groups. Thanks! dave, on behalf of the working group chairs

1 0

New on RIPE Labs: A Virtual Canary-in-the-Coalmine for the DNSSEC Root Key Rollover
by Mirjam Kuehne 27 Jun '17

27 Jun '17

Dear colleagues, On RIPE Labs Roland van Rijswijk of SURFnet describes the DNSSEC root key rollover, why you should care about it and how you can test your resolvers: https://labs.ripe.net/Members/roland_van_rijswijk/a-virtual-canary-in-the-c… Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: Recursives in the Wild: Engineering Authoritative DNS Servers
by Mirjam Kuehne 26 Jun '17

26 Jun '17

Dear colleagues, By analysing how resolvers select authoritative name servers in the wild, Moritz Müller of SIDN investigated how DNS operators are able to reduce DNS response times. Please read the article on RIPE Labs: https://labs.ripe.net/Members/moritz_muller/recursives-in-the-wild-engineer… Kind regards, Mirjam Kühne RIPE NCC

1 0

Online DS and signing algorithm test
by Roland van Rijswijk - Deij 21 Jun '17

21 Jun '17

Hi all, (apologies for cross-posting) As some of you may have picked up at the last ICANN DNSSEC workshop or at DNS OARC, we've started a project to track the impact of the Root KSK rollover over the coming months (dubbed the "Root Canary" project, see also https://rootcanary.org for rudimentary info). As a spin-off of this project, NLnet Labs and SURFnet have set up an online test that determines which DS and signing algorithms the resolver(s) configured on your system support. You can find the test here: https://rootcanary.org/test.html The test includes 4 DS algorithms (SHA1, SHA256, SHA512, GOST) and all signing algorithms. It does not do a full NSEC vs. NSEC3 test, as we assume that NSEC3 support likely also means NSEC is supported. Feedback/suggestions are of course welcome , please contact me and/or Willem Toorop at NLnet Labs. Cheers, Roland -- -- Roland M. van Rijswijk - Deij -- SURFnet bv -- w: http://www.surf.nl/en/about-surf/subsidiaries/surfnet -- e: roland.vanrijswijk(a)surfnet.nl

1 0

New on RIPE Labs: Finding Open DNS Resolvers on IPv6
by Mirjam Kuehne 16 Jun '17

16 Jun '17

Dear colleagues, Please read this new article by Luuk Hendriks on how to find open DNS resolvers on IPv6: https://labs.ripe.net/Members/luuk_hendriks/finding-open-dns-resolvers-on-i… Kind regards, Mirjam Kühne RIPE NCC

1 0

APNIC and RIPE NCC Joint Research Programme
by Anand Buddhdev 08 Jun '17

08 Jun '17

Dear all, The RIPE NCC and APNIC will be carrying out research into the DNS root server system later this month. We’ve published an article on RIPE Labs providing a brief outline of the next step in the research programme. https://labs.ripe.net/Members/alun_davies/apnic-labs-research-on-dns-root-s… Best regards, Anand Buddhdev Senior Engineer, RIPE NCC

1 0

Call For Presentations - DNS-OARC Workshop 27, San Jose, CA, USA, 29-30 September
by Shane Kerr 29 May '17

29 May '17

Hello all, DNS-OARC has issued a call for presentations for it's next workshop: ---- Call For Presentations The DNS-OARC 27th Workshop will take place in San Jose, CA, USA on September 29th and 30th 2017, the Friday and Saturday preceding NANOG 71. The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we can accommodate those talks during the Members Only session on the morning of September 29th. A timeslot will also be available for lightning talks (5-10 minutes) on Saturday September 30th, for which submissions will be accepted during Friday 29th. Workshop Milestones: 26 May 2017, Call for Presentations posted and open for submissions 28 July 2017, Deadline for submission 11 August 2017, Draft Programme published 01 September 2017, Final Program published 15 September 2017, Final deadline for slideset submission Details for presentation submission will be published here: https://indico.dns-oarc.net/event/27/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Ray Bellis, for the OARC Programme Committee OARC depends on sponorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) ---- Cheers, -- Shane (also on the OARC Programme Committee)

1 0

New on RIPE Labs: Investigating the Status of Reverse DNS
by Mirjam Kuehne 29 May '17

29 May '17

Dear colleagues, Please find this new article by Sofía Silva Berenguer on RIPE Labs: Investigating the Status of Reverse DNS This is based on a project Sofía did together with two colleagues from the RIPE NCC during the recent DNS Measurements Hackathon in Amsterdam. https://labs.ripe.net/Members/sofia_silva_berenguer/investigating-the-statu… Kind regards, Mirjam Kuhne RIPE NCC

1 0

New on RIPE Labs: Do You Have DNSSEC Validation Enabled? (by Matt Larson)
by Mirjam Kuehne 18 May '17

18 May '17

Dear colleagues, In case you missed this on the APNIC blog, please find this guest post by Matt Larson on RIPE Labs: Do You Have DNSSEC Validation Enabled? https://labs.ripe.net/Members/mirjam/do-you-have-dnssec-validation-enabled Kind regards, Mirjam Kuhne RIPE NCC

1 0