- dns-wg - mailman.ripe.net

Automatic update of DNSSEC data in the RIPE Database
by Anand Buddhdev 19 Mar '21

19 Mar '21

Dear colleagues, Some time ago, our community asked us to implement the automatic update of delegation signer (DS) records of secure delegations in the reverse DNS zones maintained by RIPE NCC. We are pleased to announce that we have implemented RFC 7344 and RFC 8078. We will begin the automatic updates on Thursday 25th May. You can read more about this in our reverse DNS configuration documentation here: https://www.ripe.net/manage-ips-and-asns/db/support/configuring-reverse-dns… At the RIPE DNS working group session on the 24th of February 2021, Ondřej Caletka presented about this topic. A recording of the session is also available for viewing here: https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions/remo… If you have any questions or concerns, please send email to dns(a)ripe.net. Regards, Anand Buddhdev RIPE NCC

1 1

DNS WG online session - March 24th 14:00 CET
by Joao Luis Silva Damas 18 Mar '21

18 Mar '21

Hi all, We are continuing our monthly online WG sessions with another on March 24th. For this one, due to online ICANN activities (about DNS) we are moving the time to #### 14:00 CET (13:00 UTC) #### rather than our usual time. We will have two presenters: - Benno Overeinder, NLNetLabs, on the recent DNS related activities at the IETF, which held its March meeting a few days ago - Scott Hollenbeck, Verisign, on Encrypted DNS to authoritative servers. Hope to see you all online next week (and note the earlier starting time) Joao for the DNS WG Chairs

1 1

NIS2: Commission adoption feedback as individual
by Niall O'Reilly 17 Mar '21

17 Mar '21

Dear friends, In case there shouldn’t be time to agree a community feedback statement on the proposed NIS2 directive, I decided to go ahead for better or worse with a private one as an “EU citizen”. You can find it here: https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… Best regards, Niall (no hat)

1 0

Fwd: Remote session on NIS2 Directive: Video and slides
by Chris Buckridge 15 Mar '21

15 Mar '21

Dear DNS Working Group participants, The RIPE Cooperation Working Group held a session earlier last week to discuss some of the issue surrounding the EU’s recent legislative proposal for a revised directive on security of networks and information services (often referred to as NIS2). It was noted in the discussion that these issues would be of interest to some of the DNS Working Group members, so I am sharing below a link to the archived video, slides and some notes on the session. As noted, the RIPE NCC intends to respond to the current European Commission open consultation (which closes on 18 March), and we will share that response to the community. Best regards, Chris > Begin forwarded message: > > From: Chris Buckridge <chrisb(a)ripe.net <mailto:chrisb@ripe.net>> > Subject: [cooperation-wg] Remote session on NIS2 Directive: Video and slides > Date: 11 March 2021 at 15:32:50 CET > To: RIPE Cooperation Working Group <cooperation-wg(a)ripe.net <mailto:cooperation-wg@ripe.net>> > > Dear Working Group, > > Following up on the remote session held on 9 March dedicated to discussion of the EU NIS2 Directive, we have published video of the Zoom session, minutes from the session (including relevant links), and the slides from Marco’s presentation: > https://www.ripe.net/participate/ripe/wg/active-wg/coop/remote-sessions/rem… <https://www.ripe.net/participate/ripe/wg/active-wg/coop/remote-sessions/rem…> > > I mentioned during the session the input of various colleagues in pulling this information together - I accidentally failed to note the input of our Senior Legal Counsel Maria Stafyla. I reference it now both to acknowledge her efforts, but also to confirm that with her input, this presentation reflects our best understanding of the legal situation (as well as the political and policy dimensions). > > We will share our response to the current consultation in a separate note. > > Best regards, > > Chris Buckridge > Head of External Relations > RIPE NCC

1 0

OARC 35 Workshop, May 6th & 7th, Registration and Call for Contributions now open
by Brett Carr 26 Feb '21

26 Feb '21

OARC 35 will be an online meeting on May 6th & 7th starting at 01:00 UTC. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: - Stories of DNS Migrations: Reasoning for DNS software migration. Tooling used to ensure a smooth and correct process. - DNS Intricacies: Chasing down problems and surprising behavior. - Garbage Traffic: Analysis on unexpected traffic seen by authoritative and recursive servers. - DITL: Day In The Life of various roles and teams in DNS. As it is an online workshop, we'd like to encourage brevity; presentations should not be longer than 20 minutes (with additional time for questions). **Workshop Milestones:** * 04 Feb 2021 - Submissions open via Indico * 18 Mar 2021 - Deadline for submission (23:59 UTC) * 25 Mar 2021 - Initial Contribution list published * 08 Apr 2021 - Full agenda published * 22 Apr 2021 - Deadline for slideset submission and Rehearsal * 06 May 2021 - OARC 35 Workshop The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc35> DNS-OARC provides registration fee waivers for the workshop to support those who are part of under-represented groups at DNS-OARC. See the registration page for details. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Additional information for speakers of OARC 35: * your talk will be broadcast live and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting * you will be expected to attend a rehearsal on April 22nd. It would be very useful to have your slides (even if draft) ready for this. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Brett Carr , for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Brett Carr Manager DNS Engineering Nominet UK

1 0

Upcoming RIPE DNS Online Meeting: 24 February
by Shane Kerr 19 Feb '21

19 Feb '21

RIPE DNS Working Group, The RIPE DNS Working Group online meetings are back! Our next session is going to be 24 February at 15:00 CET (that's 14:00 UTC). The agenda is: - Automating DNSSEC maintenance for the reverse DNS delegation by Ondřej Caletka - Trends in the DNS resolver market by Roxana Radu and Michael Hausding Both topics should be interesting and I hope you look forward to it as much as I do. The Zoom details: Topic: DNS Working Group - Meeting Time: Feb 24, 2021 03:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/98376371675?pwd=OUNTSG42VWU3MVErSU1FLzZlTmdidz09 Meeting ID: 983 7637 1675 Passcode: 380291 One tap mobile +31207940854,,98376371675# Netherlands +31207946519,,98376371675# Netherlands Dial by your location +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +31 707 006 526 Netherlands +31 20 241 0288 Netherlands +1 346 248 7799 US (Houston) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) +1 312 626 6799 US (Chicago) +1 646 558 8656 US (New York) +1 301 715 8592 US (Washington DC) Meeting ID: 983 7637 1675 Find your local number: https://ripe.zoom.us/u/abFLxKXgr0 Join by SIP 98376371675(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (Amsterdam Netherlands) 213.244.140.110 (Germany) 103.122.166.55 (Australia Sydney) 103.122.167.55 (Australia Melbourne) 149.137.40.110 (Singapore) 64.211.144.160 (Brazil) 69.174.57.160 (Canada Toronto) 65.39.152.160 (Canada Vancouver) 207.226.132.110 (Japan Tokyo) 149.137.24.110 (Japan Osaka) Meeting ID: 983 7637 1675 Passcode: 380291 See you all next week! Cheers, -- Shane for the RIPE DNS Working Group Chairs

3 2

EU NIS2 Directive and potential (unintended) consequences for DNS operators
by Roland van Rijswijk-Deij 01 Feb '21

01 Feb '21

Dear colleagues, This article by GÉANT and the linked article by Nikhef may be of interest. It discusses the potential consequences of the upcoming European NIS2 Directive, which may have (unintended) consequences for DNS operators: https://connect.geant.org/2021/01/22/running-you-own-dns-service-there-may-… (and a longer analysis by David Groep from Nikhef: https://go.nikhef.nl/NIS2-and-self-managed-DNS) Best regards, Roland -- Roland M. van Rijswijk-Deij -- NLnet Labs

1 0

No DNS wg remote session on Wednesday 27 January
by Dave Knight 27 Jan '21

27 Jan '21

Colleagues, No DNS wg remote session tomorrow, we have no content. Our next session is scheduled for Wednesday 24 February. Please submit your presentation ideas, or discussion topics to <dns-wg-chairs(a)ripe.net>. Thanks and kind regards, dave, for the dns wg chairs

1 0

Update RIPE's DNS Zonemaster
by Arsen STASIC 05 Jan '21

05 Jan '21

Hi, RIPE's DNS Zonemaster version might be outdated, because it does not support DNSSEC algorithm ED25519. This is the error message: Signature for DNSKEY with tag 52537 failed to verify with error 'Unknown cryptographic algorithm'. https://dnscheck.ripe.net/test/328db6c75665721b But the Zonemaster software (Versions: engine 4.0.3, backend 6.0.2, GUI 3.2.1) has already support for DNSSEC algorithm ED2551: https://www.zonemaster.net/result/c1607f01d96a8d60 It would be good if RIPE's Zonemaster could also list its version numbers. cheers, -Arsen

2 3

OARC 34 Workshop, February 4th & 5th, Deadline for Contributions extended to 08/01/2021 23:59
by Brett Carr 04 Jan '21

04 Jan '21

OARC 34 will be an online meeting on February 4th & 5th starting at 16:00 UTC. The Programme Committee is seeking contributions from the community. The deadline for submissions has been extended to the 8th of January All DNS-related subjects and suggestions for discussion topics are welcome. Based on the feedback from the previous workshop, the DNS-OARC audience is interested to see more content related to DNS operations. Therefore we are particularly interested in submissions from DNS Operators about attack mitigation and any major (public or non-public) DNS outages that your organization might have faced over the last year or so, the steps taken to resolve/mitigate the immediate issue, and to prevent future such events and any lessons learned. As it is an online workshop, we'd like to encourage brevity; presentations should not be longer than 20 minutes (with additional time for questions). **Workshop Milestones:** * 9 Dec 2020 - Submissions open via Indico * 8 Jan 2021 - Deadline for submission (23:59 UTC) * 14 Jan 2021 - Initial Contribution list published * 21 Jan 2021 - Full agenda published * 28 Jan 2021 - Deadline for slideset submission and Rehearsal * 4 Feb 2021 - OARC 34 Workshop The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc34> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Additional information for speakers of OARC 34: * your talk will be broadcast live and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting * you will be expected to attend a rehearsal on January 28th. It would be very useful to have your slides (even if draft) ready for this. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> <YOUR NAME HERE>, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Brett Carr Manager DNS and Network Engineering Nominet UK

1 0