- dns-wg - mailman.ripe.net

Sony Wins Pirate Site Blocking Order Against DNS-Resolver Quad9
by Stephane Bortzmeyer 21 Jun '21

21 Jun '21

I think it is the first time there is a court ruling specifically against a public DNS resolver? https://torrentfreak.com/sony-wins-pirate-site-blocking-order-against-dns-r… Note the reasoning (if some german-speaking person can confirm this is a fair summary?): > One of the arguments that Sony brought up in court was that Quad9 > already blocks various problematic sites voluntarily. This is indeed common in court: either you are neutral or you are not and, in the second case, you can no longer claim you are "just an intermediary". When you start filtering DNS answers, it is hard to resist pressures to add more filtering.

2 1

New on RIPE Labs: Fragmentation, Truncation, and Timeouts - Are Large DNS Messages Falling to Bits?
by Alun Davies 16 Jun '21

16 Jun '21

Dear colleagues, Large DNS responses over UDP can lead to fragmentation, truncation, and timeouts. But how much of a problem is this actually causing in the wild? Are large DNS messages falling to bits? In this new article now available on RIPE Labs, Giovane Moura and colleagues from SIDN Labs investigate: https://labs.ripe.net/author/giovane_moura/fragmentation-truncation-and-tim… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

The 10th Registration Operations Workshop (ROW#10) | June 8th, 2020 | 13:00 - 17:00 UTC
by Edward Lewis 28 May '21

28 May '21

The 10th Registration Operations Workshop (ROW#10) | June 8th, 2020 | 13:00 - 17:00 UTC ROW#10 will take place via Zoom Webinar platform on Tuesday, June 8th, 2021, 13:00 – 17:00 UTC. Additional time zones may be checked here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=ROW#10&iso=202106…>. Those interested in attending are required to register<https://regiops.net/events/row10registration/> in order to receive the access information (meeting ID and password). For details regarding the agenda, check out Marc Blanchet’s [Viagenie] recent blog post<https://www.circleid.com/posts/20210526-10th-registration-operations-worksh…> or visit https://regiops.net<https://regiops.net/>. If you have any questions, please contact us at row(a)viagenie.ca<mailto:row@viagenie.ca>. We would like to thank our ROW Series Sponsors ICANN<https://www.icann.org/> and Verisign<https://www.verisign.com/> for their continued support. ----- Here are some special tips if this is your first time using Zoom or you wish to get more familiar with its web conferencing capabilities: • Download the Zoom application to your computer or mobile phone. You can do it at https://zoom.us/download. You will also be prompted to download and install Zoom when you click the link to join. You can also run Zoom from your web browser by navigating to join.zoom.us<http://join.zoom.us/> and entering the meeting number and passcode. • Want to try it out before June 8th? Join a test meeting at https://zoom.us/test anytime to familiarize yourself with Zoom. You can also access Zoom tutorials here: https://support.zoom.us/hc/en-us/articles/201362193-How-Do-I-Join-A-Meeting- • As an attendee, you will be muted. For questions and comments, please use the Q&A feature. The session moderator will address them to the speakers on the mike as time permits. Questions that cannot be answered due to time constraints, will be answered directly in the Q&A window or by email. • You do not have to use the Zoom web conferencing platform with video to participate. There is an option to call-in only. • We will be recording this webinar, including the chat, and making it available on our website 48h after the session. ----- We look forward to seeing you online! ROW Program Committee Stay tuned for further updates! Follow @ROW_by_Viagenie<https://twitter.com/ROW_by_Viagenie?ref_src=twsrc%5Etfw> ROW website: https://regiops.net<https://regiops.net/> Contact us: row(a)viagenie.ca<mailto:row@viagenie.ca> ROW mailing list: regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> ROW series: co-sponsored by Verisign<https://www.verisign.com/> & ICANN<https://www.icann.org/>, organized by Viagenie<https://viagenie.ca/> (cross-posting to multiple lists - sorry for any duplicates)

1 0

RIPE 82 DNS working group agenda
by Shane Kerr 18 May '21

18 May '21

Dear DNS Colleages, Here is the agenda for the RIPE 82 meeting of the DNS working group. Cheers, -- Shane Wednesday, 19 May at 14:30 CET A. Administrivia - Agenda bashing - Approval of previous minutes B. RIPE NCC Update, Anand Buddhdev C. Deployment of CDS/CDNSKEY, Ondřej Caletka D. Resolver Centrality, João Damas & Geoff Huston E. Dear EU: Please Don't Ruin the Root at RIPE 82, Bert Hubert Z. Any other business

2 1

European Resolver Policy Update
by Andrew Campling 13 May '21

13 May '21

When I talked about the new European Resolver Policy<https://europeanresolverpolicy.com/> at the last DNS WG meeting<https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions/remo…> on 21st April, I was asked which organisations supported the policy. We've just issued a press release<https://419.consulting/encrypted-dns/f/european-resolver-policy-endorsed> detailing the first organisations to confirm their support for the policy. They include, in alphabetical order, the following: * AdGuard * DNSFilter * Farsight Security * The Internet Watch Foundation * Open-Xchange * Quad9 * Whalebone * 419 Consulting I hope this is useful, feel free to get in touch directly if you have any questions. Andrew

1 0

Fwd: [cooperation-wg] Update on NIS 2: Proposed amendments by the Parliament alter scope on (root) DNS
by Mirjam Kuehne 11 May '21

11 May '21

Dear colleagues, Please see below. This might also be interesting to the DNS WG. Kind regards, Mirjam -------- Forwarded Message -------- Subject: [cooperation-wg] Update on NIS 2: Proposed amendments by the Parliament alter scope on (root) DNS Date: Fri, 7 May 2021 12:12:06 +0200 From: Marco Hogewoning <marcoh(a)ripe.net> Reply-To: Marco Hogewoning <marcoh(a)ripe.net> To: cooperation-wg <cooperation-wg(a)ripe.net> Dear colleagues, We'd like to inform you that some changes have been proposed to NIS 2 that would accommodate some of the concerns raised by the RIPE NCC and the RIPE community. As a quick recap: the European Commission proposed an update to the Network and Information Security Directive, commonly referred to as NIS 2, which would bring the DNS root servers into scope of the directive, resulting in regulatory oversight of the DNS root server operators. Following our response on the NIS 2 proposal in the public feedback process, we reached out to a number of parties involved in the legislative process, including some members of the European Parliament, drawing attention to our concerns. The ITRE committee, which is leading this dossier in the European Parliament, yesterday published its initial report listing a number of proposed amendments. We are happy to see that it has taken on board the concerns we and other community members have raised. In particular, the committee proposes amending the scope of the directive to include: "authoritative domain name resolution services as a service procurable by third-party entities”. We realise this leaves a substantial part of the DNS in scope; however, this change would address the concerns we raised in our response by removing from scope: - DNS root operations - Small and non-commercial operators, such as people running their own DNS servers We are pleased to see these amendments and appreciate the rapporteur, MEP Groothuis, addressing our concerns. The full report is available at: https://www.europarl.europa.eu/doceo/document/ITRE-PR-692602_EN.pdf (The relevant changes are on pages 6, 27 and 57.) As a next step, the ITRE committee is provisionally scheduled to discuss this report on 27 May. We will continue to track the legislative process and keep you informed about the progress. Regards, Marco Hogewoning Manager, Public Policy and Internet Governance RIPE NCC

4 4

ROW#10 - Final call for proposals
by Edward Lewis 07 May '21

07 May '21

ROW#10: Register now & submit your proposal before May 14th, 2021 The 10th Registration Operations Workshop [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…> (ROW#10) is scheduled to take place via remote participation on June 8th, 2021, 13:00 - 16:00 UTC. IMPORTANT: Registration is required to enable participation! Those interested in attending the virtual meeting are required to register at the following link in order to receive the access information for the online session: https://regiops.net/events/row10registration/ [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/events/row10registration/__;…> Please note that the call for presentation and panel proposals is still active. Proposals in the form of a short abstract shall be submitted to row(a)viagenie.ca<mailto:row@viagenie.ca>. Deadline is May 14th, 2021. Discussions of workshop topics may also take place on the regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> mailing list. In keeping with the Registration Operations' focus of the ROW, possible topics for this session could be: • RDAP implementation experience • DNS abuse • DNS privacy and encryption • Differentiated access • Authentication and authorization • Credential Security/Credential Management • DNSSEC operationalization (CSYNC, managing transfers of secured domains) • Registration support functions (data escrow/business continuity) • Automation • Other innovative uses for registration and resolution technologies Please feel free to disseminate this Call to other lists where it might be of interest. We look forward to your participation! For additional event details and previous ROW sessions, please visit https://regiops.net [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…>. ROW Program Committee Stay tuned for further updates! Follow @ROW_by_Viagenie [twitter.com]<https://urldefense.com/v3/__https:/twitter.com/ROW_by_Viagenie?ref_src=twsr…> ROW website: https://regiops.net [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…> Contact us: row(a)viagenie.ca<mailto:row@viagenie.ca> ROW mailing list: regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> ROW series: co-sponsored by Verisign [verisign.com]<https://urldefense.com/v3/__https:/www.verisign.com/__;!!PtGJab4!r-G1XoSaep…> & ICANN<https://www.icann.org/>, organized by Viagenie [viagenie.ca]<https://urldefense.com/v3/__http:/viagenie.ca/__;!!PtGJab4!r-G1XoSaepHjvn9S…> (cross-posting to multiple lists - sorry for any duplicates)

1 0

Re: [dns-wg] European Resolver Policy
by Andrew Campling 28 Apr '21

28 Apr '21

On Wed, Apr 28, 2021 at 15:55, Stephane Bortzmeyer <bortzmeyer(a)nic.fr> wrote > Note that despite its name, it is not an "european policy", it is just an individual work developed in Europe. (Hey, I will rebrand my blog as "the European Blog".) My apologies if I wasn't clear on the call but this statement is incorrect: the policy document is indeed the result of collaboration across the tech and telecoms sectors, with input from a wide range of people. It is intended to provide a policy suited for European resolver operators, noting that anyone is welcome to apply it in other geographies should they feel that it is suitable. > Indeed, and the so-called "European Resolver Policy" does not have any advantage over RFC 8932 (a good document, I suggest all resolver operators should read it). The documents address different requirements and you will note that the European Resolver Policy recommends that resolver operators adopt the practices documented in Section 5 of RFC 8932. > And some negative, too, for instance when it asks resolvers to be lying resolvers by default. Otherwise, it brings very little new content. This may be a reference to the recommendation that resolver operators take care "in offering DNS resolution without malicious content protection or the blocking of child sexual abuse material as a default option to non-expert end-users such as consumers unless it is unlawful to provide such protections"? It is unclear to me why anyone would wish to offer non-expert users a service that recklessly increases their exposure to harmful or illegal content, although I note that some in the tech sector disagree. > No. Instead, the DNS WG should raise awareness about RFC 7626 and RFC 8932. In addition to reading RFC 8932 itself, anyone wanting more information may be interested to know that one of the co-authors of the document joined my weekly call on encrypted DNS a few weeks ago; you can hear her talk about the document in the second half of the call at https://419.consulting/encrypted-dns/f/mozilla-trr-consultation-dns-privacy. Andrew

1 0

European Resolver Policy
by Brett Carr 28 Apr '21

28 Apr '21

Those of you who were on the WG Call last week will of seen Andrew Campling from 419 Consulting give a presentation on the newly developed European Resolver policy. https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions/remo… This is an attempt to get resolver operators to operate in a standard way safeguarding the privacy of their users, some of the content is based around: RFC 8932 Recommendations for DNS Privacy Service Operators This policy document has already received some positive feedback and some organisations have already come out in support. My view is this kind of policy would be more likely to get traction if it had the rubber stamp of a well known organisation behind it, and so I had two ideas to try and make this happen. 1. DNS WG Members review the policy, provide feedback to the authors for potential updates/changes and then when we are happy it is rubber stamped as approved by the RIPE DNS WG 2. Andrew (and other volunteers), turn this into a RIPE Document format which the WG then discuss and modify as needed and then that goes through the process to ratify it as an official RIPE Document. I’d be very happy to hear other members views on whether either of the above are a good/bad idea or If there is another approach we should take or indeed if the WG should not take this on as a work item at all for any reason. Thanks Brett -- Brett Carr Manager DNS Engineering Nominet UK

2 1

DNS WG Online session on Wed 21 April at 15:00 CEST
by Dave Knight 22 Apr '21

22 Apr '21

Colleagues, Our next DNS Working Group Remote Session is on Wednesday 21 April at 15:00 CEST (13:00 UTC) Agenda: - European Resolver Policy, Andrew Campling - Update on RSSAC activities, Lars-Johan Liman Zoom details: Topic: DNS Working Group - Meeting Time: Apr 21, 2021 03:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/97218499787?pwd=TUR3RlhUV0xoM3RNSmpvNUFlVHhkUT09 Meeting ID: 972 1849 9787 Passcode: 945425 One tap mobile +31207940854,,97218499787# Netherlands +31207946519,,97218499787# Netherlands Dial by your location +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +31 707 006 526 Netherlands +31 20 241 0288 Netherlands +1 301 715 8592 US (Washington DC) +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) Meeting ID: 972 1849 9787 Find your local number: https://ripe.zoom.us/u/abkLWf7Udk Join by SIP 97218499787(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (Amsterdam Netherlands) 213.244.140.110 (Germany) 103.122.166.55 (Australia Sydney) 103.122.167.55 (Australia Melbourne) 149.137.40.110 (Singapore) 64.211.144.160 (Brazil) 69.174.57.160 (Canada Toronto) 65.39.152.160 (Canada Vancouver) 207.226.132.110 (Japan Tokyo) 149.137.24.110 (Japan Osaka) Meeting ID: 972 1849 9787 Passcode: 945425 Kind regards, dave

2 2