- dns-wg - mailman.ripe.net

New on RIPE Labs: Celebrating 30 Years of Europe’s First Root Name Server
by Alun Davies 21 Sep '21

21 Sep '21

Dear colleagues, In this new guest post on RIPE Labs, Lars-Johan Liman from Netnod talks us through the 30-year history of I-root, Europe's first root name server: https://labs.ripe.net/author/liman/celebrating-30-years-of-europes-first-ro… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

OARConline 35a Registrations and OARC 36 Call for Contributions
by Brett Carr 26 Aug '21

26 Aug '21

OARConline 35a is around the corner and will be taking place online on September 8th at 15:00 UTC. Registrations are now open at https://www.dns-oarc.net/oarc35a. OARC 36 will be an online meeting on November 29th & 30th starting at 10:00 UTC. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: - Deployment: Managing DNS changes and propagation, release process, change management. - Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly detection. - Scaling: Managing service capacity, failovers, disaster recovery. As it is an online workshop, we'd like to encourage brevity; presentations should not be longer than 20 minutes (with additional time for questions). **Workshop Milestones:** * 25 August 2021 - Submissions open via Indico * 1 October 2021 - Deadline for submission (23:59 UTC) * 11 October 2021 - Initial Contribution list published * 1 November 2021 - Full agenda published * 16 November 2021 - Deadline for slideset submission and Rehearsal * 29 & 30 November 2021 - OARC 36 Workshop The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc36> DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups at DNS-OARC. See the registration page for details. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Additional information for speakers of OARC 36: * your talk will be broadcast live and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting * you will be expected to attend a rehearsal on November 16th. It would be very useful to have your slides (even if draft) ready for this. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net<mailto:submissions@dns-oarc.net>> Brett Carr, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net<mailto:sponsor@dns-oarc.net>> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Brett Carr Manager DNS Engineering Nominet UK

1 0

Fwd: [dns-privacy] ANRW on DNS privacy
by Shane Kerr 26 Jul '21

26 Jul '21

RIPE DNS folks, There's some interesting stuff being discussed that might be of some interest to members of the DNS working group. Cheers, -- Shane

1 0

New on RIPE Labs: An Analysis of Responses to Mozilla’s Trusted Recursive Resolver Public Consultation
by Alun Davies 23 Jul '21

23 Jul '21

Dear colleagues, Mozilla's public consultation into the TRR policy closed in January this year. In this article, Andrew Campling provides an analysis of the responses received: https://labs.ripe.net/author/andrew_campling/an-analysis-of-responses-to-mo… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

Apple's iCloud Private Relay Service
by Andrew Campling 19 Jul '21

19 Jul '21

You'll be aware that Apple announced its Private Relay service<https://developer.apple.com/videos/play/wwdc2021/10096.%C2%A0> at WWDC last month, using Oblivious DoH to provide an additional layer of privacy for DNS queries along with other privacy-related features. Tommy Pauly of Apply joined my weekly call last Monday to run through responses to a series of questions (copy attached for reference), which may be of interest to members of this group: you can access a recording of the call via this link<https://419.consulting/encrypted-dns/f/icloud-private-relay>. Andrew Regards Andrew Campling MBA MSc DipM FRSA FCIM MIoD Liveryman Director | 419 Consulting Ltd | Tel: +44 (0) 7710 303010 | E: Andrew.Campling(a)419.Consulting<mailto:Andrew.Campling@419.Consulting>| t: @Andrew_Campling This email contains information from 419 Consulting Ltd that might be privileged or confidential. And it's only meant for the person above. If that's not you, we're sorry - we must have sent it to you by mistake. Please email us to let us know, and don't copy or forward it to anyone else. Thanks. We monitor our email systems and may record all our emails. 419 Consulting Ltd Registered in England: No 11944258 [A picture containing clipartDescription automatically generated]

1 0

Blockchain Address Transparency with DNS
by Eduardo Duarte 12 Jul '21

12 Jul '21

Dear all, [Sorry for duplicate postings!] .PT as sponsor a work on using DNS to map Blockchains addresses and I would like to share the paper with the community. It follows in attach. If you have doubts or comments please ask that I will relay it to the relevant people. ;) Best regards, -- eduardo_sign Aviso de Confidencialidade/Disclaimer: Este e-mail foi escrito de acordo com o novo acordo ortográfico. Esta mensagem é exclusivamente destinada ao seu destinatário, podendo conter informação CONFIDENCIAL, cuja divulgação está expressamente vedada nos termos da lei. Caso tenha recepcionado indevidamente esta mensagem, solicitamos-lhe que nos comunique esse mesmo facto por esta via devendo apagar o seu conteúdo de imediato. This message is intended exclusively for its addressee. It may contain CONFIDENTIAL information protected by law. If this message has been received by error, please notify us via e-mail and delete it immediately. [ Antes de imprimir esta mensagem pense no ambiente. Before printing this message, think about environment ]

1 0

OARConline 35a Workshop, September 8th, Call for Contributions now open
by Brett Carr 05 Jul '21

05 Jul '21

OARConline 35a will be an online meeting on September 8th 2021 starting at 15:00 UTC. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: - Deployment: Managing DNS changes and propagation, release process, change management. - Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly detection. - Scaling: Managing service capacity, failovers, disaster recovery. As it is an online workshop, we'd like to encourage brevity; presentations will be 10 or 20 minutes (including time for questions). **Workshop Milestones:** * 30 June 2021 - Submissions open via Indico * 20 July 2021 - Deadline for submission (23:59 UTC) * 27 July 2021 - Initial Contribution list published * 10 August 2021 - Full agenda published * 24 August 2021 - Deadline for slideset submission and Rehearsal * 08 September 2021 - OARConline 35a Workshop The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc35a> DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups at DNS-OARC. See the registration page for details. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Additional information for speakers of OARConline 35a: * your talk will be broadcast live and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting * you will be expected to attend a rehearsal on August 24th. It would be very useful to have your slides (even if draft) ready for this. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Jan Včelák, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Brett Carr Manager DNS Engineering Nominet UK

1 0

DNSSEC algorithm roll-over of all RIPE NCC zones
by Anand Buddhdev 30 Jun '21

30 Jun '21

Dear colleagues, During the RIPE 82 Meeting, we announced that we would soon roll the keys of all our DNSSEC-signed zones to a new algorithm, ECDSAP256SHA256, as recommended by RFC 8624. We are happy to announce that we are now ready to do this. On Tuesday, 15 June 2021, we will start the roll-over of both the Key Signing Keys (KSKs) and Zone Signing Keys (ZSKs) of our zones. The process will take several days to complete. We have performed algorithm roll-over previously, when we switched from RSASHA1 to RSASHA256. We wrote a RIPE Labs article about it, wherein we observed the need to perform this roll-over conservatively, in order to accommodate strict validators:  https://labs.ripe.net/author/anandb/dnssec-algorithm-roll-over/ Therefore, our Knot DNS signer will use the conservative approach described in section 4.1.4 of RFC 6781. This approach ensures that even strict validators can continue to validate our DNSSEC-signed responses during the roll-over. If you have any questions or concerns, please send an email to dns(a)ripe.net. Regards, Anand Buddhdev RIPE NCC

2 1

Sony Wins Pirate Site Blocking Order Against DNS-Resolver Quad9
by Stephane Bortzmeyer 21 Jun '21

21 Jun '21

I think it is the first time there is a court ruling specifically against a public DNS resolver? https://torrentfreak.com/sony-wins-pirate-site-blocking-order-against-dns-r… Note the reasoning (if some german-speaking person can confirm this is a fair summary?): > One of the arguments that Sony brought up in court was that Quad9 > already blocks various problematic sites voluntarily. This is indeed common in court: either you are neutral or you are not and, in the second case, you can no longer claim you are "just an intermediary". When you start filtering DNS answers, it is hard to resist pressures to add more filtering.

2 1

New on RIPE Labs: Fragmentation, Truncation, and Timeouts - Are Large DNS Messages Falling to Bits?
by Alun Davies 16 Jun '21

16 Jun '21

Dear colleagues, Large DNS responses over UDP can lead to fragmentation, truncation, and timeouts. But how much of a problem is this actually causing in the wild? Are large DNS messages falling to bits? In this new article now available on RIPE Labs, Giovane Moura and colleagues from SIDN Labs investigate: https://labs.ripe.net/author/giovane_moura/fragmentation-truncation-and-tim… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0