- ripe-list - mailman.ripe.net

Call for Support: RIPE response to the US NTIA's NoI
by Ondřej Surý 17 Nov '08

17 Nov '08

I fully support the response text. Ondrej Sury ----------------------------------------------------------------------------- # # $Id: ntia-draft,v 1.9 2008/11/13 20:20:41 jim Exp $ # The RIPE community thanks the NTIA for its consultation on proposals to sign the root and is pleased to offer the following response to that consultation. We urge the adoption of a solution that leads to the prompt introduction of a signed root zone. Our community considers the introduction of a signed root zone to be an essential enabling step towards widespread deployment of Secure DNS, DNSSEC. This view is supported by the letter from the RIPE community to ICANN as an outcome of discussions at the May 2007 RIPE meeting in Tallinn: http://www.ripe.net/ripe/wg/dns/icann-root-signing.pdf. It is to be expected that a community as diverse as RIPE cannot have a unified set of detailed answers to the NTIA questionnaire. However several members of the RIPE community will be individually responding to that questionnaire. We present the following statement as the consensus view of our community about the principles that should form the basis of the introduction of a signed DNS root. 1. Secure DNS, DNSSEC, is about data authenticity and integrity and not about control. 2. The introduction of DNSSEC to the root zone must be made in such a way that it is accepted as a global initiative. 3. Addition of DNSSEC to the root zone must be done in a way that does not compromise the security and stability of the Domain Name System. 4. When balancing the various concerns about signing the root zone, the approach must provide an appropriate level of trust and confidence by offering an optimally secure solution. 5. Deployment of a signed root should be done in a timely but not hasty manner. 6. Updates from TLD operators relating to DNSSEC should be aligned with the operational mechanisms for co-ordinating changes to the root zone. 7. If any procedural changes are introduced by the deployment of DNSSEC they should provide sufficient flexibility to allow for the roles and processes as well as the entities holding those roles to be changed after suitable consultations have taken place. 8. Policies and processes for signing the root zone must be transparent and trustworthy, making it straightforward for TLDs to supply keys and credentials so the delegations for those TLDs can benefit from a common DNSSEC trust anchor, the signed root. 9. There is no technical justification to create a new organisation to oversee the process of signing of the root. 10. No data should be moved between organisations without appropriate authenticity and integrity checking, particularly the flow of keying material between a TLD operator and the entity that signs the root. 11. The public part of the key signing key must be distributed as widely as possible. 12. The organisation that generates the root zone file must sign the file and therefore hold the private part of the zone signing key. 13. Changes to the entities and roles in the signing process must not necessarily require a change of keys. ----------------------------------------------------------------------------- -- Ondrej Sury technicky reditel/Chief Technical Officer ----------------------------------------- CZ.NIC, z.s.p.o. -- .cz domain registry Americka 23,120 00 Praha 2,Czech Republic mailto:ondrej.sury@nic.cz http://nic.cz/ sip:ondrej.sury@nic.cz tel:+420.222745110 mob:+420.739013699 fax:+420.222745112 -----------------------------------------

1 0

Call for Support: RIPE response to the US NTIA's NoI
by Remco van Mook 17 Nov '08

17 Nov '08

Dear all, I strongly support the response that has been drafted on behalf of the RIPE community to the US NTIA's NoI. In my opinion it captures all aspects of both consensus and concern in this community and the guiding principles stated in it should, when heeded, help us get DNSSEC introduced into the DNS root zone in a meaningful way. My compliments to the people responsible for drafting this text. Kind regards, Remco van Mook General Manager Equinix Netherlands This email is from Equinix Europe Limited or one of its associated/subsidiary companies. This email, and any files transmitted with it, contains information which is confidential, may be legally privileged and is solely for the use of the intended recipient. If you have received this email in error, please notify the sender and delete this email immediately. Equinix Europe Limited. Registered Office: Quadrant House, Floor 6, 17 Thomas More Street, Thomas More Square, London E1W 1YW. Registered in England and Wales No. 6293383.

1 0

Heads Up: RIPE Response to the US NTIA drafted in the DNS WG
by Peter Koch 10 Nov '08

10 Nov '08

Dear RIPE Community, this is to inform you that - as reported during the RIPE57 plenary in Dubai - the DNS WG is working on a response to the US NTIA's NoI for deployment of DNSSEC in the DNS root zone: <http://www.ntia.doc.gov/DNS/DNSSEC.html> The latest draft version of the proposed statement can be found on the DNS WG mailing list at <http://www.ripe.net/ripe/maillists/archives/dns-wg/2008/msg00218.html> The plan is to ask the RIPE community on this list for statements of support once the DNS WG has reached consensus later this week. If you would like to contribute, please read the discussion in the DNS WG's archive and respond on the DNS WG mailing list. In order to meet the NTIA's deadline - provided consensus will have been reached in the DNS WG and a consensus call will have been issued to this list - it is unlikely we will be able to apply further refinements to the text. Instead, there will be a binary decision depending on community response to the consensus call. -Peter Koch [DNS WG co-chair]

1 0

My photos from RIPE-57
by Patrik Fältström 30 Oct '08

30 Oct '08

Friends, Many people have asked me where my photos from RIPE-57 end up. They can be found at my gallery, http://stupid.domain.name/gallery/internet/ripe/RIPE-57/ . You can there of course also find my photos from other RIPE, IETF etc meetings. The photos from the yesterday trip in the desert are slowly appearing... About one photo every 3-4 minutes. Now (09:37 local time in Dubai) about 130 photos to go...you do the math. Regards, Patrik

1 0

Name of jabber room has changed
by Patrik Fältström 30 Oct '08

30 Oct '08

The name of the jabber room for the Coperation Wg is "coop", and the name of the jabber server is "conference.ripe.net". Not "cooperation" that was stated earlier. Regards, Patrik Fältström Chair of the cooperation wg session and RIPE-57

1 0

Participate remotely at RIPE 57
by RIPE NCC Meeting Coordinator 27 Oct '08

27 Oct '08

[Apologies for duplicates] Dear Colleagues, The RIPE 57 Meeting is now underway in Dubai, United Arab Emirates. If you're not able to be present in the meeting room, there are various options for participating remotely in the meeting proceedings, including Jabber chat rooms, live webcasts and live streaming transcripts. For information on how to access these services, please see: http://www.ripe.net/ripe/meetings/ripe-57/live/ If you have any questions, please contact <meeting(a)ripe.net>. Regards, Camilla Meidell Conference Coordinator RIPE NCC

1 0

RIPE 57: Services and Activities Available During the Meeting
by RIPE NCC Meeting Coordinator 16 Oct '08

16 Oct '08

RIPE 57: Services and Activities Available During the Meeting [Apologies for duplicates] Dear Colleagues, During the RIPE 57 Meeting, 26-30 October 2008 at the JW Marriott Hotel in Dubai, the following services and activities will be available to meeting attendees. RIPE NCC Services Centre ------------------------ RIPE NCC members and non-members are welcome to visit the RIPE NCC Services Centre, where representatives from the RIPE NCC's Billing and Registration Services departments are available to answer questions. You can also book appointments with RIPE NCC staff in advance using the online booking form at: http://rosie.ripe.net/services-centre.php Is this your first RIPE Meeting? -------------------------------- If this is your first RIPE Meeting, the Newcomers’ Introduction Talk, held on Sunday at 12:30 in the Salon I-III, provides a useful overview of RIPE, the RIPE NCC and how the RIPE Meetings are structured. The RIPE Meeting Meet & Greet Team will also be available throughout the week to help you get acquainted with how the meetings work and who’s who. Social Events ------------- After the daily meeting sessions on Sunday through Wednesday, there are a range of fun social events. Information about the social events is available at: http://rosie.ripe.net/social-events.php Registration ------------ You can register online for RIPE 57 at: https://lirportal.ripe.net/lirportal/meeting/register/54 There are a number of attendance options available. More information, including prices for the different options, is available at: http://www.ripe.net/ripe/meetings/introduction.html#4 More Information ---------------- If you have any questions, please contact <meeting(a)ripe.net>. Please also check the RIPE 57 homepage regularly for updated information: http://www.ripe.net/ripe/meetings/ripe-57/ Regards, Camilla Meidell Conference Coordinator RIPE NCC

1 0

RIPE 57: Updated Meeting Agenda
by RIPE NCC Meeting Coordinator 08 Oct '08

08 Oct '08

[Apologies for duplicates] Dear Colleagues, The RIPE 57 Meeting will take place on 26-30 October (Sunday - Thursday) 2008, at the JW Marriott Hotel in Dubai, United Arab Emirates. Meeting Agenda -------------- The RIPE 57 Meeting agenda has been updated and published at: http://www.ripe.net/ripe/meetings/ripe-57/meeting-plan.html Hotel Information ----------------- We recommend that you book your hotel as soon as possible, as rates are subject to availability. More information about hotels in Dubai is available at: http://www.ripe.net/ripe/meetings/ripe-57/hotels.html Plenary Topics -------------- The topics to be discussed in the plenary sessions have been published at: http://www.ripe.net/ripe/meetings/ripe-57/agendas/index.html Registration ------------ You can register online for RIPE 57 at: https://lirportal.ripe.net/lirportal/meeting/register/54 There are a number of different attendance options available. More information, including prices for the different options, is available at: http://www.ripe.net/ripe/meetings/introduction.html#4 More Information ---------------- If you have any questions, please contact <meeting(a)ripe.net>. Please also check the RIPE 57 homepage regularly for updated information: http://www.ripe.net/ripe/meetings/ripe-57/ Regards, Camilla Meidell Conference Coordinator RIPE NCC

1 0

RIPE 57: Reminder to Register
by RIPE NCC Meeting Coordinator 02 Oct '08

02 Oct '08

[Apologies for duplicates] Dear Colleagues, This is a brief reminder to register for the RIPE 57 Meeting, being held from 26-30 October (Sunday - Thursday) 2008, at the JW Marriott Hotel, in Dubai, United Arab Emirates. Registration ------------ You can register online for RIPE 57 at: https://lirportal.ripe.net/lirportal/meeting/register/54 There are a number of different attendance options available. More information, including prices for the different options, is available at: http://www.ripe.net/ripe/meetings/introduction.html#4 Meeting Agenda -------------- The RIPE 57 Meeting agenda has been published at: http://www.ripe.net/ripe/meetings/ripe-57/meeting-plan.html Hotel Information ----------------- We recommend that you book your hotel as soon as possible, as rates are subject to availability. More information about hotels in Dubai is available at: http://www.ripe.net/ripe/meetings/ripe-57/hotels.html More information ---------------- If you have any questions, please contact <meeting(a)ripe.net>. Please also check the RIPE 57 homepage regularly for updated information: http://www.ripe.net/ripe/meetings/ripe-57/ Regards, Camilla Meidell Conference Coordinator RIPE NCC

1 0

Last Chance to Participate - Global IPv6 Penetration Survey Closes Wednesday 1 October
by Paul Rendek 29 Sep '08

29 Sep '08

[Apologies for duplicates] Dear Colleagues, Almost seven hundred organisations have responded so far to the IPv6 Penetration Survey. Sponsored by ARIN, in cooperation with the Cooperative Association for Internet Data Analysis (CAIDA), this survey is gathering data regarding current and future use of IPv6 around the world. All organisations in the AfriNIC, APNIC, ARIN, LACNIC and RIPE NCC regions are invited to participate in the survey so we can establish a comprehensive view of present IPv6 penetration and future plans for IPv6 deployment. The survey opened on 8 September and remains available until 17:00 EDT on 1 October. The results of the survey will be presented and discussed at the ARIN XXII Public Policy and Members Meeting to be held in Los Angeles, California from 15-17 October 2008. Additionally, the summary results will be shared with all the RIRs for further distribution within their respective regions. The survey data will support ongoing research. The survey is composed of 22 questions that can be answered in a few minutes. This is a secure survey and all data will be presented in summary form only, and kept confidential between ARIN and CAIDA. When you complete the survey you will be entered in a drawing for prizes, one raffle per RIR region. You must provide your contact information to win. Please take a few moments to complete the survey located at: https://www.surveymonkey.com/s.aspx?sm=loMM8qu18yFoKyi0rTUpQg_3d_3d Regards, Paul Rendek Head of External Relations and Communications RIPE NCC

1 0