- dns-wg - mailman.ripe.net

RIPE NCC Planned Maintenance, February/March 2007
by RIPE NCC 19 Feb '07

19 Feb '07

[Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC will perform maintenance work that will affect a number of servers. The maintenance work will take place on: Tuesday, 20 February 2007 between 18:00 and 20:00 UTC Thursday, 22 February 2007 between 18:00 and 20:00 UTC Tuesday, 27 February 2007 between 18:00 and 20:00 UTC During this maintenance, individual servers may experience short outages. We apologise for any inconvenience that this may cause. If you have any questions about this, please send an e-mail to ops(a)ripe.net. Regards, James -- James Aldridge, Senior Systems & Network Engineer, RIPE NCC

1 0

World's first commercial service for DNSSEC launched in Sweden
by Anne-Marie Eklund-Löwinder 16 Feb '07

16 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [2007-02-16] .SE (The Internet Infrastructure Foundation) responsible for the Swedish top-level domain on the Internet, today launched .SE-DNSSEC, the world's first commercial service with DNS Security Extensions (DNSSEC) for cryptographically signed name resolving in the domain name system (DNS), in the presence of Dr. Steve Crocker, major Swedish ISP:s, Registrars, Government Agencys, Swedish DNS experts and Swedish banks. http://www.iis.se/english/nyheter/news/2007-02-16?lang=en The first customer registered just minutes after the launch. Anne-Marie Eklund Löwinder Quality & Security Manager .SE (The Internet Infrastructure Foundation) P O Box 7399 103 91 Stockholm Sweden Tel: +46 8 452 35 00, direct: +46 8 452 35 17, mobile: +46 734 315 310 E-mail: anne-marie.eklund-lowinder(a)iis.se Web: www.iis.se -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBRdXHnaXc8AFCsc+UEQKyQgCgroFV70K5SvVYPKeIzma0+ma2vDIAn2j/ snytxj/Xamt6T8mEL3kqNoRc =oNcW -----END PGP SIGNATURE-----

3 4

Maintenance on ns-pri.ripe.net
by Brett Carr 15 Feb '07

15 Feb '07

[Apologies for duplicates] Dear Colleagues, On 21 February 2007, authoritative Reverse DNS Services on ns-pri.ripe.net will be unavailable between 18:00 and 21:00 UTC. During this time we need to carry out maintenance work. We apologise in advance for any inconvenience. If you have any questions or concerns about this, send an e-mail to <dns-help(a)ripe.net> Regards -- Brett Carr Manager -- DNS Services Group RIPE Network Coordination Centre Amsterdam

1 0

Announcement DNS for LIRs Training Courses
by RIPE NCC Training Services 12 Feb '07

12 Feb '07

Dear Colleagues, The RIPE NCC Training Services Department invites you to register for one of our upcoming DNS for LIRs Training Courses: Date: Friday 30 March 2007 Time: 09:00-17:00 Location: Lisbon, Portugal And Date: Friday 20 April 2007 Time: 09:00-17:00 Location: Frankfurt, Germany Hosted by: DE.CIX: http://www.decix.de/ And Date: Friday 27 April 2007 Time: 09:00-17:00 Location: Budapest, Hungary And Date: Friday 18 May 2007 Time: 09:00-17:00 Location: Amsterdam, Netherlands And Date: Friday 8 June 2007 Time: 09:00-17:00 Location: London, United Kingdom And Date: Thursday 21 June 2007 Time: 09:00-17:00 Location: Tehran, Iran The main objective of the DNS for LIRs Training Course is to provide LIRs with information about the different DNS related services the RIPE NCC has available for them. It covers reverse DNS procedures and checks, as well as giving information about DNS Monitoring (DNSMON), K-Root and anycasting. The course also covers DNSSEC and the specific procedures set up by the RIPE NCC to secure the in-addr.arpa zones. Please note that the DNS for LIRs course focuses on DNS services and procedures related to being an LIR. The course does: - NOT teach the basics of DNS - NOT describe how to receive Internet resources from the RIPE NCC - NOT describe fully how to operate a Local Internet Registry (LIR) The course is intended for technical staff of LIRs. It is assumed that all attendees are familiar with common DNS terminology and have a practical knowledge of operating DNS servers. The course is free of charge. We provide lunch and printed training materials. We do not cover any of your travel expenses or accommodation. We give all of our training courses in English. You can find more information about the course at: http://www.ripe.net/training/dns REGISTRATION: ============ To register for this course, please use the LIR Portal or complete the registration via our website on: http://www.ripe.net/cgi-bin/trainingform.pl.cgi If you have any questions please do not hesitate to contact us at <training(a)ripe.net>. Kind regards, Rumy Kanis Training Services Manager RIPE NCC

1 0

RIPE NCC Planned Maintenance, February 2007
by RIPE NCC 29 Jan '07

29 Jan '07

[Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC will perform planned maintenance work that will affect a number of servers. The maintenance work will take place on: Thursday, 1 February 2007 between 21:00 and 23:00 UTC Wednesday, 7 February 2007 between 21:00 and 23:00 UTC During this maintenance, individual servers may experience short outages. We apologise for any inconvenience that this may cause. If you have any questions about this, please send an e-mail to: ops(a)ripe.net

1 0

Our RIPE document has been published
by Jim Reid 24 Jan '07

24 Jan '07

Here's the news from the NCC's webmaster: Your draft-document has been published at http://www.ripe.net/ripe/docs/ripe-400.html I have also made changes to all of the associated pages. http://www.ripe.net/ripe/draft-documents/index.html - removal of your draft doc. http://www.ripe.net/ripe/docs/index.html - inclusion of ripe-400 under the heading 'recently published' and 'information services documents'. http://www.ripe.net/ripe/docs/titletoc.html If you require further amendments please let me know. Kind regards, Nichola

1 0

Lameness Checking Draft
by Jim Reid 23 Jan '07

23 Jan '07

Colleagues, the lame delegation draft -- http://www.ripe.net/ripe/ draft-documents/dns-lameness.html -- that was produced by the WG has completed an uneventful Last Call. So this means we have consensus and the draft now goes forward as a RIPE document. [Silence implies consent.:-)] The WG co-chairs thank everyone who contributed to this document. Special thanks are due to Brett Carr who did most of the heavy lifting to produce the document. The NCC is now starting on implementation. Brett's team are documenting the software requirements and hope to have a limited demo available for RIPE54.

1 0

Lameness Checking Draft
by Jim Reid 23 Jan '07

23 Jan '07

Colleagues, the lame delegation draft -- http://www.ripe.net/ripe/ draft-documents/dns-lameness.html -- that was produced by the WG has completed an uneventful Last Call. So this means we have consensus and the draft now goes forward as a RIPE document. The WG co-chairs thank everyone who contributed to this document. Special thanks are due to Brett Carr who did most of the heavy lifting to produce the document.

1 0

New KSK for .SE
by Anne-Marie Eklund-Löwinder 05 Jan '07

05 Jan '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 New key signing key (KSK) for .SE As from 2007-01-04 .SE publish and take into use a new KSK for signing the .SE zone file. The old key will be valid until 2008-01-01. If you have configured the old key (Key id = 17686) into your resolver we strongly recommend you to replace it with the new key (Key id = 6166) no later than 2007-12-31. Following public keys are valid for .SE: se. IN DNSKEY 257 3 5 ( AwEAAaxPMcR2x0HbQV4WeZB6oEDX+r0QM65KbhTjrW1Z aARmPhEZZe3Y9ifgEuq7vZ/zGZUdEGNWy+JZzus0lUpt wgjGwhUS1558Hb4JKUbbOTcM8pwXlj0EiX3oDFVmjHO4 44gLkBOUKUf/mC7HvfwYH/Be22GnClrinKJp1Og4ywzO 9WglMk7jbfW33gUKvirTHr25GL7STQUzBb5Usxt8lgny TUHs1t3JwCY5hKZ6CqFxmAVZP20igTixin/1LcrgX/KM EGd/buvF4qJCyduieHukuY3H4XMAcR+xia2nIUPvm/oy WR8BW/hWdzOvnSCThlHf3xiYleDbt/o1OTQ09A0= ) ; key id = 17686 se. IN DNSKEY 257 3 5 ( AwEAAb6xRZHEf+PyF5dxEvz0BHEHbziu6iZaiNW/yjSa ZcmrmZiRMF8FPppD+XuKSau0rgu4eBwYdpkEoMVR4FhI 8frkuPHIue2LP1ETo+2hCrdr60K1538yLvzbOhMxXt6k njPN+OlalMmCknadaofKga5FLKOPQs2C3nw6AH4WUNGr chmDMVBwRwfZdQXYZTXesqULmGMK7mwjQGOxerRDQWrF v8NhNnVV31PihaYBdQ1TJjvfGS/FYZJwv/BddiELiLeU nNWu3AOsRAshgOcDBOAPUvKJNEq6RHELFmvXOOe2d8H2 yzv02EMQik6GwUm16DrSdmX+SWfelQs+9ELFN6k= ) ; key id = 6166 The keys are also available at http://dnssec.iis.se/key.html DNS users that haven't earlier but are going to configure their DNS to ask for DNSSEC answers should only use the new key. DNS users that haven't explicitly configured their DNS to ask for DNSSEC answers this will not involve any changes at all. We do also advice you to subscribe to the dnssec-announce(a)lists.nic.se mailing list to get notified about key rollovers and any other important changes. Questions may be addressed to dnssec-info(a)iis.se. Anne-Marie Eklund Löwinder Quality & Security Manager .SE (The Internet Infrastructure Foundation) P O Box 7399 103 91 Stockholm Sweden Tel: +46 8 452 35 00, direct: +46 8 452 35 17, mobile: +46 734 315 310 E-mail: anne-marie.eklund-lowinder(a)iis.se Web: www.iis.se -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBRZ4rBqXc8AFCsc+UEQKMfgCeIFq1xZiK0XJLa5QEyiPZ1qtW1coAnAvy q0tq5ATA3Ldlfa0DoChKUEGJ =LgnA -----END PGP SIGNATURE-----

1 0

[dnssec-deployment] New KSK for .SE (fwd)
by Brett Carr 04 Jan '07

04 Jan '07

I think that this may interest some folks on this list. -- Brett Carr RIPE Network Coordination Centre Manager -- DNS Services Group Singel 258 Amsterdam NL GPG Key fingerprint = F20D B2A7 C91D E370 44CF F244 B6A1 EF48 E743 F7D8 ---------- Forwarded message ---------- Date: Thu, 4 Jan 2007 12:26:25 +0100 From: "[iso-8859-1] Anne-Marie Eklund-Löwinder" <Anne-Marie.Eklund-Lowinder(a)iis.se> To: DNSSEC deployment <dnssec-deployment(a)shinkuro.com> Subject: [dnssec-deployment] New KSK for .SE -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 New key signing key (KSK) for .SE As from today, 2007-01-04 .SE publish and take into use a new KSK for signing the .SE zone file. The old key will be valid until 2008-01-01. If you have configured the old key (Key id = 17686) into your resolver we strongly recommend you to replace it with the new key (Key id = 6166) no later than 2007-12-31. Following public keys are valid for .SE: se. IN DNSKEY 257 3 5 ( AwEAAaxPMcR2x0HbQV4WeZB6oEDX+r0QM65KbhTjrW1Z aARmPhEZZe3Y9ifgEuq7vZ/zGZUdEGNWy+JZzus0lUpt wgjGwhUS1558Hb4JKUbbOTcM8pwXlj0EiX3oDFVmjHO4 44gLkBOUKUf/mC7HvfwYH/Be22GnClrinKJp1Og4ywzO 9WglMk7jbfW33gUKvirTHr25GL7STQUzBb5Usxt8lgny TUHs1t3JwCY5hKZ6CqFxmAVZP20igTixin/1LcrgX/KM EGd/buvF4qJCyduieHukuY3H4XMAcR+xia2nIUPvm/oy WR8BW/hWdzOvnSCThlHf3xiYleDbt/o1OTQ09A0= ) ; key id = 17686 se. IN DNSKEY 257 3 5 ( AwEAAb6xRZHEf+PyF5dxEvz0BHEHbziu6iZaiNW/yjSa ZcmrmZiRMF8FPppD+XuKSau0rgu4eBwYdpkEoMVR4FhI 8frkuPHIue2LP1ETo+2hCrdr60K1538yLvzbOhMxXt6k njPN+OlalMmCknadaofKga5FLKOPQs2C3nw6AH4WUNGr chmDMVBwRwfZdQXYZTXesqULmGMK7mwjQGOxerRDQWrF v8NhNnVV31PihaYBdQ1TJjvfGS/FYZJwv/BddiELiLeU nNWu3AOsRAshgOcDBOAPUvKJNEq6RHELFmvXOOe2d8H2 yzv02EMQik6GwUm16DrSdmX+SWfelQs+9ELFN6k= ) ; key id = 6166 The keys are also available at http://dnssec.iis.se/key.html DNS users that haven't earlier but are going to configure their DNS to ask for DNSSEC answers should only use the new key. DNS users that haven't explicitly configured their DNS to ask for DNSSEC answers this will not involve any changes at all. We do also advice you to subscribe to the dnssec-announce(a)lists.nic.se mailing list to get notified about key rollovers and any other important changes Questions may be addressed to dnssec-info(a)iis.se Anne-Marie Eklund Löwinder Quality & Security Manager .SE (The Internet Infrastructure Foundation) P O Box 7399 103 91 Stockholm Sweden Tel: +46 8 452 35 00, direct: +46 8 452 35 17, mobile: +46 734 315 310 E-mail: anne-marie.eklund-lowinder(a)iis.se Web: www.iis.se -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBRZzkYaXc8AFCsc+UEQLWwwCaAibkesPscNtzsjeWWLmrFKLcaa8AoJli +i6VDyKfg8wqbW9lkCwynJY5 =YaRn -----END PGP SIGNATURE----- ############################################################# This message is sent to you because you are subscribed to the mailing list <dnssec-deployment(a)shinkuro.com>. To unsubscribe, E-mail to: <dnssec-deployment-off(a)shinkuro.com> A public archive is available here: <http://mail.shinkuro.com:8100/Lists/dnssec-deployment/> and older material is at <http://mail.shinkuro.com:8100/Lists/dnssec-deployment-archive/>

1 0