February 2007 - dns-wg - mailman.ripe.net

What about the last mile, was: getting DNSSEC deployed
by Roy Arends 06 Apr '07

06 Apr '07

Kudo's to TDC Song, C&W and others. Real nice they're validating data. So what about joe end user. Are there initiatives to offer tsig/sig0/dtls between user and isp ? Are there initiatives to deploy code at the OS level, similar as to what the NLNetLabs and Sparta folk are building for the application level ? Are formentioned providers deploying either of these two sets of solutions to their end users ? Or is it all just security theater ? Bring dns validation to where dns requests are initiated and where it is consumed; at the end user. That part is still vulnerable to spoofing while we're trying to secure the invisible infrastructure. Note that with end user validation, and well established methods to update the end users' certificate store, we might be well on our way. See also: http://dnss.ec/blog/?p=10 Sure, signing the root is crucial, and I'm not convinced dlv is a viable alternative, but thats all meaningless if layer 6/7 don't get some fondling. Roy

14 49

Swedish ISP TCD Song Adopts DNSSEC
by Anne-Marie Eklund-Löwinder 27 Feb '07

27 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ** Swedish ISP TDC Song Adopts DNSSEC Swedish Internet Service Provider TDC Song announced in a press release on Friday that it will run DNSSEC on its name servers and thus be able to offer safer broadband services to its customers. TDC Song will be using .SE-DNSSEC, a service offered by .SE (The Internet Infrastructure Foundation) responsible for the Swedish top-level domain .se. For the full press release (in Swedish), see: http://wpy.observer.se/wpyfs/00/00/00/00/00/09/35/D0/release.html ** Anne-Marie Eklund Löwinder Quality & Security Manager .SE (The Internet Infrastructure Foundation) P O Box 7399 103 91 Stockholm Sweden Tel: +46 8 452 35 00, direct: +46 8 452 35 17, mobile: +46 734 315 310 E-mail: anne-marie.eklund-lowinder(a)iis.se Web: www.iis.se -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBRdCLtaXc8AFCsc+UEQIB8QCg4aRoRyiK+TzRgYOSCb8eBMSyUCsAn2v9 8PdylTKBWZcOnYC2sUed8jLy =ABy6 -----END PGP SIGNATURE-----

10 20

Maintenance on ns.ripe.net
by Brett Carr 22 Feb '07

22 Feb '07

[Apologies for duplicates] Dear Colleagues, On 28 February 2007, authoritative Reverse DNS Services on ns.ripe.net will be unavailable between 18:00 and 21:00 UTC. During this time we need to carry out maintenance work. We apologise in advance for any inconvenience. If you have any questions or concerns about this, send an e-mail to dns-help(a)ripe.net Regards -- Brett Carr Manager -- DNS Services Group RIPE Network Coordination Centre Amsterdam

1 0

RIPE NCC Planned Maintenance, February/March 2007
by RIPE NCC 19 Feb '07

19 Feb '07

[Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC will perform maintenance work that will affect a number of servers. The maintenance work will take place on: Tuesday, 20 February 2007 between 18:00 and 20:00 UTC Thursday, 22 February 2007 between 18:00 and 20:00 UTC Tuesday, 27 February 2007 between 18:00 and 20:00 UTC During this maintenance, individual servers may experience short outages. We apologise for any inconvenience that this may cause. If you have any questions about this, please send an e-mail to ops(a)ripe.net. Regards, James -- James Aldridge, Senior Systems & Network Engineer, RIPE NCC

1 0

World's first commercial service for DNSSEC launched in Sweden
by Anne-Marie Eklund-Löwinder 16 Feb '07

16 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [2007-02-16] .SE (The Internet Infrastructure Foundation) responsible for the Swedish top-level domain on the Internet, today launched .SE-DNSSEC, the world's first commercial service with DNS Security Extensions (DNSSEC) for cryptographically signed name resolving in the domain name system (DNS), in the presence of Dr. Steve Crocker, major Swedish ISP:s, Registrars, Government Agencys, Swedish DNS experts and Swedish banks. http://www.iis.se/english/nyheter/news/2007-02-16?lang=en The first customer registered just minutes after the launch. Anne-Marie Eklund Löwinder Quality & Security Manager .SE (The Internet Infrastructure Foundation) P O Box 7399 103 91 Stockholm Sweden Tel: +46 8 452 35 00, direct: +46 8 452 35 17, mobile: +46 734 315 310 E-mail: anne-marie.eklund-lowinder(a)iis.se Web: www.iis.se -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBRdXHnaXc8AFCsc+UEQKyQgCgroFV70K5SvVYPKeIzma0+ma2vDIAn2j/ snytxj/Xamt6T8mEL3kqNoRc =oNcW -----END PGP SIGNATURE-----

3 4

Maintenance on ns-pri.ripe.net
by Brett Carr 15 Feb '07

15 Feb '07

[Apologies for duplicates] Dear Colleagues, On 21 February 2007, authoritative Reverse DNS Services on ns-pri.ripe.net will be unavailable between 18:00 and 21:00 UTC. During this time we need to carry out maintenance work. We apologise in advance for any inconvenience. If you have any questions or concerns about this, send an e-mail to <dns-help(a)ripe.net> Regards -- Brett Carr Manager -- DNS Services Group RIPE Network Coordination Centre Amsterdam

1 0

Announcement DNS for LIRs Training Courses
by RIPE NCC Training Services 12 Feb '07

12 Feb '07

Dear Colleagues, The RIPE NCC Training Services Department invites you to register for one of our upcoming DNS for LIRs Training Courses: Date: Friday 30 March 2007 Time: 09:00-17:00 Location: Lisbon, Portugal And Date: Friday 20 April 2007 Time: 09:00-17:00 Location: Frankfurt, Germany Hosted by: DE.CIX: http://www.decix.de/ And Date: Friday 27 April 2007 Time: 09:00-17:00 Location: Budapest, Hungary And Date: Friday 18 May 2007 Time: 09:00-17:00 Location: Amsterdam, Netherlands And Date: Friday 8 June 2007 Time: 09:00-17:00 Location: London, United Kingdom And Date: Thursday 21 June 2007 Time: 09:00-17:00 Location: Tehran, Iran The main objective of the DNS for LIRs Training Course is to provide LIRs with information about the different DNS related services the RIPE NCC has available for them. It covers reverse DNS procedures and checks, as well as giving information about DNS Monitoring (DNSMON), K-Root and anycasting. The course also covers DNSSEC and the specific procedures set up by the RIPE NCC to secure the in-addr.arpa zones. Please note that the DNS for LIRs course focuses on DNS services and procedures related to being an LIR. The course does: - NOT teach the basics of DNS - NOT describe how to receive Internet resources from the RIPE NCC - NOT describe fully how to operate a Local Internet Registry (LIR) The course is intended for technical staff of LIRs. It is assumed that all attendees are familiar with common DNS terminology and have a practical knowledge of operating DNS servers. The course is free of charge. We provide lunch and printed training materials. We do not cover any of your travel expenses or accommodation. We give all of our training courses in English. You can find more information about the course at: http://www.ripe.net/training/dns REGISTRATION: ============ To register for this course, please use the LIR Portal or complete the registration via our website on: http://www.ripe.net/cgi-bin/trainingform.pl.cgi If you have any questions please do not hesitate to contact us at <training(a)ripe.net>. Kind regards, Rumy Kanis Training Services Manager RIPE NCC

1 0