- dns-wg - mailman.ripe.net

RIPE 82 DNS working group agenda
by Shane Kerr 18 May '21

18 May '21

Dear DNS Colleages, Here is the agenda for the RIPE 82 meeting of the DNS working group. Cheers, -- Shane Wednesday, 19 May at 14:30 CET A. Administrivia - Agenda bashing - Approval of previous minutes B. RIPE NCC Update, Anand Buddhdev C. Deployment of CDS/CDNSKEY, Ondřej Caletka D. Resolver Centrality, João Damas & Geoff Huston E. Dear EU: Please Don't Ruin the Root at RIPE 82, Bert Hubert Z. Any other business

2 1

European Resolver Policy Update
by Andrew Campling 13 May '21

13 May '21

When I talked about the new European Resolver Policy<https://europeanresolverpolicy.com/> at the last DNS WG meeting<https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions/remo…> on 21st April, I was asked which organisations supported the policy. We've just issued a press release<https://419.consulting/encrypted-dns/f/european-resolver-policy-endorsed> detailing the first organisations to confirm their support for the policy. They include, in alphabetical order, the following: * AdGuard * DNSFilter * Farsight Security * The Internet Watch Foundation * Open-Xchange * Quad9 * Whalebone * 419 Consulting I hope this is useful, feel free to get in touch directly if you have any questions. Andrew

1 0

Fwd: [cooperation-wg] Update on NIS 2: Proposed amendments by the Parliament alter scope on (root) DNS
by Mirjam Kuehne 11 May '21

11 May '21

Dear colleagues, Please see below. This might also be interesting to the DNS WG. Kind regards, Mirjam -------- Forwarded Message -------- Subject: [cooperation-wg] Update on NIS 2: Proposed amendments by the Parliament alter scope on (root) DNS Date: Fri, 7 May 2021 12:12:06 +0200 From: Marco Hogewoning <marcoh(a)ripe.net> Reply-To: Marco Hogewoning <marcoh(a)ripe.net> To: cooperation-wg <cooperation-wg(a)ripe.net> Dear colleagues, We'd like to inform you that some changes have been proposed to NIS 2 that would accommodate some of the concerns raised by the RIPE NCC and the RIPE community. As a quick recap: the European Commission proposed an update to the Network and Information Security Directive, commonly referred to as NIS 2, which would bring the DNS root servers into scope of the directive, resulting in regulatory oversight of the DNS root server operators. Following our response on the NIS 2 proposal in the public feedback process, we reached out to a number of parties involved in the legislative process, including some members of the European Parliament, drawing attention to our concerns. The ITRE committee, which is leading this dossier in the European Parliament, yesterday published its initial report listing a number of proposed amendments. We are happy to see that it has taken on board the concerns we and other community members have raised. In particular, the committee proposes amending the scope of the directive to include: "authoritative domain name resolution services as a service procurable by third-party entities”. We realise this leaves a substantial part of the DNS in scope; however, this change would address the concerns we raised in our response by removing from scope: - DNS root operations - Small and non-commercial operators, such as people running their own DNS servers We are pleased to see these amendments and appreciate the rapporteur, MEP Groothuis, addressing our concerns. The full report is available at: https://www.europarl.europa.eu/doceo/document/ITRE-PR-692602_EN.pdf (The relevant changes are on pages 6, 27 and 57.) As a next step, the ITRE committee is provisionally scheduled to discuss this report on 27 May. We will continue to track the legislative process and keep you informed about the progress. Regards, Marco Hogewoning Manager, Public Policy and Internet Governance RIPE NCC

4 4

ROW#10 - Final call for proposals
by Edward Lewis 07 May '21

07 May '21

ROW#10: Register now & submit your proposal before May 14th, 2021 The 10th Registration Operations Workshop [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…> (ROW#10) is scheduled to take place via remote participation on June 8th, 2021, 13:00 - 16:00 UTC. IMPORTANT: Registration is required to enable participation! Those interested in attending the virtual meeting are required to register at the following link in order to receive the access information for the online session: https://regiops.net/events/row10registration/ [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/events/row10registration/__;…> Please note that the call for presentation and panel proposals is still active. Proposals in the form of a short abstract shall be submitted to row(a)viagenie.ca<mailto:row@viagenie.ca>. Deadline is May 14th, 2021. Discussions of workshop topics may also take place on the regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> mailing list. In keeping with the Registration Operations' focus of the ROW, possible topics for this session could be: • RDAP implementation experience • DNS abuse • DNS privacy and encryption • Differentiated access • Authentication and authorization • Credential Security/Credential Management • DNSSEC operationalization (CSYNC, managing transfers of secured domains) • Registration support functions (data escrow/business continuity) • Automation • Other innovative uses for registration and resolution technologies Please feel free to disseminate this Call to other lists where it might be of interest. We look forward to your participation! For additional event details and previous ROW sessions, please visit https://regiops.net [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…>. ROW Program Committee Stay tuned for further updates! Follow @ROW_by_Viagenie [twitter.com]<https://urldefense.com/v3/__https:/twitter.com/ROW_by_Viagenie?ref_src=twsr…> ROW website: https://regiops.net [regiops.net]<https://urldefense.com/v3/__https:/regiops.net/__;!!PtGJab4!r-G1XoSaepHjvn9…> Contact us: row(a)viagenie.ca<mailto:row@viagenie.ca> ROW mailing list: regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> ROW series: co-sponsored by Verisign [verisign.com]<https://urldefense.com/v3/__https:/www.verisign.com/__;!!PtGJab4!r-G1XoSaep…> & ICANN<https://www.icann.org/>, organized by Viagenie [viagenie.ca]<https://urldefense.com/v3/__http:/viagenie.ca/__;!!PtGJab4!r-G1XoSaepHjvn9S…> (cross-posting to multiple lists - sorry for any duplicates)

1 0

Re: [dns-wg] European Resolver Policy
by Andrew Campling 28 Apr '21

28 Apr '21

On Wed, Apr 28, 2021 at 15:55, Stephane Bortzmeyer <bortzmeyer(a)nic.fr> wrote > Note that despite its name, it is not an "european policy", it is just an individual work developed in Europe. (Hey, I will rebrand my blog as "the European Blog".) My apologies if I wasn't clear on the call but this statement is incorrect: the policy document is indeed the result of collaboration across the tech and telecoms sectors, with input from a wide range of people. It is intended to provide a policy suited for European resolver operators, noting that anyone is welcome to apply it in other geographies should they feel that it is suitable. > Indeed, and the so-called "European Resolver Policy" does not have any advantage over RFC 8932 (a good document, I suggest all resolver operators should read it). The documents address different requirements and you will note that the European Resolver Policy recommends that resolver operators adopt the practices documented in Section 5 of RFC 8932. > And some negative, too, for instance when it asks resolvers to be lying resolvers by default. Otherwise, it brings very little new content. This may be a reference to the recommendation that resolver operators take care "in offering DNS resolution without malicious content protection or the blocking of child sexual abuse material as a default option to non-expert end-users such as consumers unless it is unlawful to provide such protections"? It is unclear to me why anyone would wish to offer non-expert users a service that recklessly increases their exposure to harmful or illegal content, although I note that some in the tech sector disagree. > No. Instead, the DNS WG should raise awareness about RFC 7626 and RFC 8932. In addition to reading RFC 8932 itself, anyone wanting more information may be interested to know that one of the co-authors of the document joined my weekly call on encrypted DNS a few weeks ago; you can hear her talk about the document in the second half of the call at https://419.consulting/encrypted-dns/f/mozilla-trr-consultation-dns-privacy. Andrew

1 0

European Resolver Policy
by Brett Carr 28 Apr '21

28 Apr '21

Those of you who were on the WG Call last week will of seen Andrew Campling from 419 Consulting give a presentation on the newly developed European Resolver policy. https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions/remo… This is an attempt to get resolver operators to operate in a standard way safeguarding the privacy of their users, some of the content is based around: RFC 8932 Recommendations for DNS Privacy Service Operators This policy document has already received some positive feedback and some organisations have already come out in support. My view is this kind of policy would be more likely to get traction if it had the rubber stamp of a well known organisation behind it, and so I had two ideas to try and make this happen. 1. DNS WG Members review the policy, provide feedback to the authors for potential updates/changes and then when we are happy it is rubber stamped as approved by the RIPE DNS WG 2. Andrew (and other volunteers), turn this into a RIPE Document format which the WG then discuss and modify as needed and then that goes through the process to ratify it as an official RIPE Document. I’d be very happy to hear other members views on whether either of the above are a good/bad idea or If there is another approach we should take or indeed if the WG should not take this on as a work item at all for any reason. Thanks Brett -- Brett Carr Manager DNS Engineering Nominet UK

2 1

DNS WG Online session on Wed 21 April at 15:00 CEST
by Dave Knight 22 Apr '21

22 Apr '21

Colleagues, Our next DNS Working Group Remote Session is on Wednesday 21 April at 15:00 CEST (13:00 UTC) Agenda: - European Resolver Policy, Andrew Campling - Update on RSSAC activities, Lars-Johan Liman Zoom details: Topic: DNS Working Group - Meeting Time: Apr 21, 2021 03:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/97218499787?pwd=TUR3RlhUV0xoM3RNSmpvNUFlVHhkUT09 Meeting ID: 972 1849 9787 Passcode: 945425 One tap mobile +31207940854,,97218499787# Netherlands +31207946519,,97218499787# Netherlands Dial by your location +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +31 707 006 526 Netherlands +31 20 241 0288 Netherlands +1 301 715 8592 US (Washington DC) +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) Meeting ID: 972 1849 9787 Find your local number: https://ripe.zoom.us/u/abkLWf7Udk Join by SIP 97218499787(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (Amsterdam Netherlands) 213.244.140.110 (Germany) 103.122.166.55 (Australia Sydney) 103.122.167.55 (Australia Melbourne) 149.137.40.110 (Singapore) 64.211.144.160 (Brazil) 69.174.57.160 (Canada Toronto) 65.39.152.160 (Canada Vancouver) 207.226.132.110 (Japan Tokyo) 149.137.24.110 (Japan Osaka) Meeting ID: 972 1849 9787 Passcode: 945425 Kind regards, dave

2 2

New on RIPE Labs: Understanding the European Resolver Policy
by Alun Davies 20 Apr '21

20 Apr '21

Dear colleagues, The European Resolver Policy is intended to provide reassurance to end-users and other stakeholders that personal data gained in the operation of DNS resolution services will not be misused. In this guest post on RIPE Labs, Andrew Campling talks about the aims and benefits of the policy: https://labs.ripe.net/author/andrew_campling/understanding-the-european-res… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

2 1

Registration Operations Workshop #10
by Edward Lewis 19 Apr '21

19 Apr '21

ROW#10: Register now & submit your proposal June 8th, 2021 | 13:00 - 16:00 UTC | Zoom Video Conference ROW#10<https://regiops.net> will be held via remote participation on June 8th, 2021, 13:00 - 16:00 UTC. Check additional time zones here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=ROW#10&iso=202106…>. Registration is NOW available at: https://regiops.net/events/row10registration/ ROW's Program Committee has also opened the call for presentation and panel proposals and is interested in: 1. Topic related presentation proposals. 2. Topic suggestions for focused panel discussions. 3. Suggestions for additional topics. In the past, workshops have included discussions focused on Extensible Provisioning Protocol (EPP), WHOIS, Registry Lock, Registration Data Access Protocol (RDAP) and many more. Below is a non-exhaustive list of possible topics for this session. • RDAP implementation experience • DNS abuse • DNS privacy and encryption • Differentiated access • Authentication and authorization • Credential Security/Credential Management • DNSSEC operationalization (CSYNC, managing transfers of secured domains) • Registration support functions (data escrow/business continuity) • Automation • Other innovative uses for registration and resolution technologies Please email a short abstract describing your proposal to row(a)viagenie.ca<mailto:row@viagenie.ca> We also encourage discussions/suggestions for additional topics on ROW’s mailing list regiops(a)googlegroups.com<mailto:regiops@googlegroups.com>. Important dates: • Deadline to submit proposals: May 14th, 2021 • Program Committee to notify selected authors by May 21st, 2021 • Speaker agreements and materials required from selected presenters by May 31st, 2021 We hope that you can join us and request that you disseminate this Call to other lists where it might be of interest. ROW Program Committee Stay tuned for further updates! Follow @ROW_by_Viagenie<https://twitter.com/ROW_by_Viagenie?ref_src=twsrc%5Etfw> ROW website: http://regiops.net<http://regiops.net/> Contact us: row(a)viagenie.ca<mailto:row@viagenie.ca> ROW mailing list: regiops(a)googlegroups.com<mailto:regiops@googlegroups.com> ROW series: co-sponsored by Verisign<https://www.verisign.com/> & ICANN<https://www.icann.org/>, organized by Viagenie<http://viagenie.ca/> (cross-posting to multiple lists - sorry for any duplicates)

1 0

Call for contributions
by Dave Knight 09 Apr '21

09 Apr '21

Hi all, We have our last remote session prior to RIPE 82 coming up on Wednesday, April 21st, and our session at RIPE 82 on Wednesday, May 21st. We're currently seeking contributions for both of those. Presentations and suggestions for discussion topics are always welcome, recent operational experiences and observations are particularly encouraged. Please send your ideas to the DNS WG Chairs at <dns-wg-chair(a)ripe.net> You can find an archive of our previous sessions at https://www.ripe.net/participate/ripe/wg/active-wg/dns/remote-sessions Thanks and kind regards, dave for the dns wg chairs

1 1