- dns-wg - mailman.ripe.net

Re: [dns-wg] New on RIPE Labs: Making the DNS More Private with QNAME Minimisation
by Wouter de Vries 29 Apr '19

29 Apr '19

On Mon, Apr 29, 2019 at 08:43:52AM +0100, Piete Brooks wrote: > > In the case your resolver was doing qmin, the third line should have read something like: > > myip -> 185.49.141.12 TXT b.qnamemin-test.internet.nl (omitting the last label: a). > > And a second typo would allow me to understand it - was that a TXT or an NS lookup? I blame it on early monday. That should have been NS indeed :-). Also your other comment about the IP is correct, sorry about that. So the final request/response sequence should happen between myip and 185.49.141.13.

1 0

New on RIPE Labs: Making the DNS More Private with QNAME Minimisation
by Mirjam Kuehne 29 Apr '19

29 Apr '19

Dear colleagues, DNS queries can contain a lot of sensitive information about Internet users. Query name minimisation (qmin) limits the information revealed to what is actually necessary for a DNS name server to answer the query. Woute de Vries, Moritz Mueller and others did a study on qmin deployment and the associated challenges: https://labs.ripe.net/Members/wouter_de_vries/make-dns-a-bit-more-private-w… Kind regards, Mirjam Kühne RIPE NCC

5 5

RIPE 78 DNS working group draft agenda v2
by Shane Kerr 10 Apr '19

10 Apr '19

Colleagues, Here's an updated draft agenda for the DNS working group session in RIPE 78 (we overlooked an interesting submission from Roland van Rijswijk-Deij). We're meeting on Thursday 23 May from 16:00 to 17:30. 1. Administrivia 5 minutes 2. Overview of the DNS Privacy Software landscape by Carsten Strotmann 30 minutes 3. unwind, a validating DNS recursive nameserver by Carsten Strotmann 5 minutes 4. DNS flag day 2019 and beyond by Petr Špaček @ CZ.NIC 15 minutes 5. Tag You're It!: Revisiting the Reality of DNSSEC Keytags by Roland M. van Rijswijk-Deij 15 minutes 6. root KSK Rollover Wrap-up by the DNS working group chairs 15 minutes 7. DNS-OARC Summary by Dave Knight 10 minutes See you in Reykjavík! -- The RIPE DNS Working Group Chairs Dave, Joao, and Shane

1 0

RIPE 78 DNS working group draft agenda
by Shane Kerr 08 Apr '19

08 Apr '19

Colleagues, Here's a draft agenda for the DNS working group session in RIPE 78. We're meeting on Thursday 23 May from 16:00 to 17:30. 1. Administrivia 5 minutes 2. Overview of the DNS Privacy Software landscape by Carsten Strotmann 30 minutes 3. unwind, a validating DNS recursive nameserver by Carsten Strotmann 5 minutes 4. DNS flag day 2019 and beyond by Petr Špaček @ CZ.NIC 15 minutes 5. root KSK Rollover Wrap-up by the DNS working group chairs 20 minutes 6. DNS-OARC Summary by Dave Knight 10 minutes See you in Reykjavík! -- The RIPE DNS Working Group Chairs Dave, Joao, and Shane

1 0

Call for contributions to the RIPE 78 meeting of the dns-wg
by Dave Knight 02 Apr '19

02 Apr '19

Dear colleagues, The RIPE 78 meeting in Reykjavik is a few weeks away and we’d like to form our agenda. Please submit your presentation ideas, or suggestions for discussions to <dns-wg-chairs(a)ripe.net>. Please don’t submit anything using the meeting submission web form, it’s not intended for submission of content to working groups. Thanks! dave, on behalf of the working group chairs

2 2

How to determine the last message in sequence in DNS TCP responce
by Владимир Мартьянов 27 Feb '19

27 Feb '19

I make DNS zone transfer request (aka AXFR) via TCP to the server. The answer is too big (>100Kb), so it could not be sent in one TCP message. So the server send me a sequence of messages. How can I determine which message is the last? I can't found anything about it's count in the first message. I can't found any special flag in the last one. I can't found anything about it in RFC1035. Could you please explain how to find "end of answer"?

3 2

New on RIPE Labs: Managing DNS Zones Using Git
by Mirjam Kuehne 04 Feb '19

04 Feb '19

Dear colleagues, Using zone files for managing the Domain Name System (DNS) zone data is the most basic and flexible way to manage the authoritative DNS data. In this post on RIPE Labs, Ondřej Caletka describes how the Git version control system can be used to store zone file history and protect against errors: https://labs.ripe.net/Members/ondrej_caletka/managing-dns-zones-using-git Kind regards, Mirjam Kühne RIPE NCC

1 0

DNSViz Relocates to DNS-OARC
by Matthew Pounsett 01 Feb '19

01 Feb '19

OARC is pleased to announce that dnsviz.net has moved to join many other tools that we support for the DNS community. DNSViz, Casey Deccio's excellent DNSSEC debugging tool, was initially developed and hosted at Sandia National Laboratories, and has been hosted most recently at Verisign. We'd like to thank them both for providing that service for many years, and Verisign for donating the hardware that DNSViz will continue to live on in the near future. We're happy to be picking up the torch! Casey continues to be the primary developer and maintainer of the application, while OARC takes on the role of hosting and operating the online service. Unfortunately, we will be without the historical functions of the tool for a little over a week while the hardware is in transit between data centers, and DNSVIZ runs on an interim platform. Full access to the historical data will be restored once the hardware is brought back online during the week of February 11th. Matt Pounsett DNS-OARC Systems Engineering

1 0

Call For Presentations - DNS-OARC Workshop, Thailand, Bangkok, 12th/13th May 2019
by Dave Knight 06 Dec '18

06 Dec '18

Colleagues, The 30th DNS-OARC Workshop will take place at the Shangri-La Hotel, Bangkok, Thailand, on May 12th and 13th 2019, hosted by ICANN. (Note that several co-located meetings are taking place immediately prior to the DNS-OARC Workshop, including the GDD Industry Summit, May 6th-9th, the Registrations Operations Workshop, May 9th, and the ICANN DNS Symposium, May 10th-11th.) The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted until the start of the morning session on day two. There will be a Members-only session during the workshop, which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. Workshop Milestones: 05 Dec 2018 - Submissions open via Indico 22 Feb 2019 - Deadline for submission 01 Mar 2019 - Initial Contribution list published 22 Mar 2019 - Full agenda published 03 May 2019 - Deadline for slideset submission 12 May 2019 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/31/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Dave Knight, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

New on RIPE Labs: DoH - It's DNS Jim, but not as we know it!
by Mirjam Kuehne 06 Dec '18

06 Dec '18

Dear colleagues, At RIPE 77, Sara Dickinson talked about what’s been going on with DNS over the past five years from the perspective of end devices. Now in article form, here's what Sara had to say about the status of the IETF standards for DNS over TLS (DoT) and DNS over HTTPS (DoH) as well as the deployment status of clients and servers for those technologies. https://labs.ripe.net/Members/sara_dickinson/doh-its-dns-jim-but-not-as-we-… Kind regards, Mirjam Kühne RIPE NCC

1 0