September 2017 - ripe-list - mailman.ripe.net

DNS Root Zone KSK Rollover postponed
by Axel Pawlik 29 Sep '17

29 Sep '17

Dear colleagues, Yesterday, ICANN announced that it is postponing the plan to roll, or change, the 'apex' cryptographic key used in the DNSSEC protocol, commonly known as the Root Zone KSK (Key Signing Key). The KSK Rollover was due to occur on 11 October 2017. This will now be postponed to allow more time for network operators using DNSSEC-validating resolvers to update their systems with the new KSK. A new date has not yet been set, however ICANN’s announcement says it is tentatively aiming for Q1 2018: https://www.icann.org/news/announcement-2017-09-27-en All network operators using DNSSEC-validating resolvers are encouraged to update their DNS resolver systems with the new KSK in preparation for the new Rollover date. If you have additional questions, please email ICANN: <globalsupport(a)icann.org> with "KSK Rollover" in the subject line. Regards, Axel Pawlik RIPE NCC

1 0

[news] RIPE Policy Proposals - September Update
by Marco Schmidt 29 Sep '17

29 Sep '17

Dear colleagues, Here is our monthly overview of open policy proposals and their stage in the RIPE Policy Development Process (PDP). If you wish to join the discussion about a particular proposal, please do so on the relevant working group mailing list. Proposals Open for Discussion: NEW: 2017-02, "Regular abuse-c Validation" NEW: 2017-03, "Reducing Initial IPv4 Allocation, Aiming to Preserve a Minimum of IPv4 Space for Newcomers" Proposals Awaiting Input: 2016-04, "IPv6 PI Sub-assignment Clarification" Proposal Withdrawn: 2017-01, "Publish statistics on Intra-RIR Legacy updates" Proposal Overview: NEW PROPOSAL: 2017-02, "Regular abuse-c Validation" OVERVIEW: The goal of this proposal is to give the RIPE NCC a mandate to regularly validate "abuse-c:" information and to follow up in cases where contact information is found to be invalid. STATUS: Discussion Phase WHERE TO COMMENT: Anti-Abuse Working Group: anti-abuse-wg(a)ripe.net DEADLINE: 6 October 2017 FULL PROPOSAL: https://www.ripe.net/participate/policies/proposals/2017-02 NEW PROPOSAL: 2017-03, "Reducing Initial IPv4 Allocation, Aiming to Preserve a Minimum of IPv4 Space for Newcomers " OVERVIEW: The goal of this proposal is to reduce the IPv4 allocations made by the RIPE NCC to a /24 (currently a /22) and only to LIRs that have not received an IPv4 allocation directly from the RIPE NCC before. STATUS: Discussion Phase WHERE TO COMMENT: Address Policy Working Group: address-policy-wg(a)ripe.net DEADLINE: 20 October 2017 FULL PROPOSAL: https://www.ripe.net/participate/policies/proposals/2017-03 ===== The following proposal is awaiting input before they can go any further in the PDP. PROPOSAL: 2016-04, "IPv6 PI Sub-assignment Clarification" OVERVIEW: The goal of this proposal is to define sub-assignments in IPv6 PI assignments as subnets of /64 and shorter. RIPE NCC IMPACT ANALYSIS: Explains feasibility and possible side effects. STATUS: Review Phase – Creating impact analysis for new version FULL PROPOSAL: https://www.ripe.net/participate/policies/proposals/2016-04 ===== The following proposal has been withdrawn. PROPOSAL: 2017-01, "Publish statistics on Intra-RIR Legacy updates" OVERVIEW: This proposal aimed to add the requirement that the RIPE NCC publish all changes to the holdership of legacy resources in the existing transfer statistics. STATUS: Withdrawn. The proposer didn't see enough community support, especially from Legacy Resource Holders as the parties that would be most affected. FULL PROPOSAL: https://www.ripe.net/participate/policies/proposals/2017-01 The RIPE NCC provides an overview of current RIPE Policy Proposals here: https://www.ripe.net/participate/policies/current-proposals/current-policy-… We look forward to your involvement in the PDP. Kind regards, Marco Schmidt RIPE Policy Development Officer RIPE NCC Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum

1 0

New on RIPE Labs: How informal channels are important for network coordination
by Mirjam Kuehne 27 Sep '17

27 Sep '17

Dear colleagues, Please find this new article on RIPE Labs by Uta Meier-Hahn: "When Internet Interconnection Trouble Occurs, Immediate Coordination Kicks in" https://labs.ripe.net/Members/uta_meier_hahn/when-internet-interconnection-… Kind regards, Mirjam Kuhne RIPE NCC

1 0

Network security and Brussels
by Gordon Lennox 14 Sep '17

14 Sep '17

The Commission has just published a little bunch of things on security. As a very simple guide: a “Communication” is about what could happen, a “Report” is about what has happened and the “Regulation” is about changing ENISA. A lot of reading! Too much? But of interest to various WGs, including of course the Cooperation WG and the new IoT community? So: A COMMUNICATION from the Commission to the European Parliament and the Council. Making the most of NIS – towards the effective implementation of Directive (EU) 2016/1148 concerning measures for a high common level of security of network and information systems across the Union https://ec.europa.eu/transparency/regdoc/rep/1/2017/EN/COM-2017-476-F1-EN-M… https://ec.europa.eu/transparency/regdoc/rep/1/2017/EN/COM-2017-476-F1-EN-A… A REPORT from the Commission to the European Parliament and the Council assessing the extent to which member states have taken the necessary measures to comply with Directive 2013/40/EU on attacks against information systems and replacing Council Framework Decision 2005/222/JHA https://ec.europa.eu/transparency/regdoc/rep/1/2017/EN/COM-2017-474-F1-EN-M… A REPORT from the Commission to the European Parliament and the Council on the evaluation of the European Union Agency for Network and Information Security (ENISA) https://ec.europa.eu/transparency/regdoc/rep/1/2017/EN/COM-2017-478-F1-EN-M… A Proposal for a REGULATION of the European Parliament and of the Council on ENISA, the "EU Cybersecurity Agency", and repealing Regulation (EU) 526/2013, and on Information and Communication Technology cybersecurity certification (''Cybersecurity Act'') https://ec.europa.eu/transparency/regdoc/rep/1/2017/EN/COM-2017-477-F1-EN-M… Gordon

1 0

Global Consultation on Identifier Technical Health Indicators (ITHI) Project
by Nick Hyrka 13 Sep '17

13 Sep '17

This message is sent on behalf of the Number Resource Organization. The Number Resource Organization (NRO) has developed a proposal for ITHI risk identification and definition in response to an ongoing ICANN initiative. Each Regional Internet Registry (RIR) is responsible for ensuring the accuracy of its registry data. This is critical to the reliability of the RIR Whois databases which provide access to the public data of the Registry. For the purposes of measuring the state of the data, accuracy has been defined as “comprehensive, correct, and current”. The Registration Services coordination (RSCG) and Engineering coordination groups (ECG) have developed recommendations for how the RIRs can identify and measure risk associated with registry data accuracy. We are now seeking feedback on the NRO ITHI project proposal, specifically on the definition of the risks and measurements to report on registry data accuracy. Proposal for ITHI risk identification and definition: https://www.nro.net/wp-content/uploads/RSCG_ITHI_Project_Proposal.pdf The deadline for providing feedback is 12 December 2017. Community feedback and discussion will be conducted on the <ithi-consult(a)nro.net> mailing list. You can subscribe to the global mailing list at: https://www.nro.net/mailman/listinfo/ithi-consult Key points for discussion: - The proposed approach - The proposed measurement matrix - Other information such as how often to measure, where to post results, what formats to share results Other links ICANN ITHI page: www.icann.org/ithi ITHI presentation from ICANN 57: https://www.icann.org/en/system/files/files/ithi-icann57-07nov16-en.pdf

1 0

SAFNOG-3: Attendees & Speakers
by Mark Tinka 03 Sep '17

03 Sep '17

Hello all. A list of all currently registered attendees is available for your inspection here: http://safnog.org/attendees.php/ This list is updated daily, so do check regularly to see if there are any personalities you would like to meet at this year's SAFNOG meeting. Also, details on each of the speakers at this year's meeting are available here: http://safnog.org/speakers.html With just 2 days to go, we look forward to seeing you all in Durban! Cheers, Mark Tinka On Behalf of the SAFNOG Management Committee

1 0