January 2010 - dns-wg - mailman.ripe.net

L-Root Maintenance 2010-01-27 1800 UTC - 2000 UTC
by Mehmet Akcin 25 Jan '10

25 Jan '10

Hi As part of staged, incremental deployment of DNSSEC in the root zone L-Root will begin serving a Deliberately Unvalidatable Root Zone (DURZ) after the completion of its scheduled maintenance at 2010-01-27 1800 UTC - 2000 UTC Please contact L-Root NOC via noc(a)dns.icann.org or T: +1.310.301.5817 if you have any questions. Please contact with rootsign(a)icann.org if you have any questions regarding DNSSEC Deployment at root zone. Regards Joe Abley / Mehmet Akcin / Dave Knight ICANN DNS Ops / L-ROOT

1 0

Reverse DNS Outage Announcement
by Sjoerd Oostdijck 22 Jan '10

22 Jan '10

[Apologies for duplicates] Dear Colleagues, At 13:50 on Thursday, 21 January, an error was introduced into the RIPE NCC's reverse DNS provisioning system. This caused reverse DNS delegations to stop working for allocations in the following range: 77.0.0.0 to 77.220.7.255 This error was triggered by an internal cleanup of our Early Registration Transfer (ERX) DNS delegations, which was being conducted as part of the RIPE NCC's Registration Data Quality (RDQ) project. The reverse DNS provisioning system was corrected again on 22 January at 09:50 (UTC). However, due to negative caching in DNS resolvers, the problem may have remained visible for a further two hours. The RIPE NCC is currently revising the reverse DNS provisioning system to prevent errors such as this occurring in future. If you have any questions or comments, please send an email to <ncc(a)ripe.net>. Regards, Sjoerd Oostdijck DNS Services Group, RIPE NCC

1 0

DNSSEC signed version of .PT
by Sara Monteiro 13 Jan '10

13 Jan '10

FYI - Apologies if you have already seen this on other lists. Sara Monteiro Pedro Veiga wrote, On 12-01-2010 14:36: > Dear colleagues, > > I'm glad to inform that we have signed the ccTLD .PT in the beginning of > 2010 and the DNSSEC signed version of .pt is in production since 4th of > January. > > For the outside world the .pt infrastructures didn't change, we still > have the same primary name server and a half a dozen of secondaries > (with dnssec-awareness), but we did add an hidden primary where the > signing it's made using an HSM to generate and store the keys. > > We are still working to improve the DNSSEC service in the administrative > side, and we hope to make it available to or Registrars/Registrants in > the next month. > > We are scheduling DNSSEC Technical Workshops to your Registrars and NREN > - National Research and Education Network since they are more proactive > and have the human resources and means to do it. We also have single > registrants with the enough DNS knowledge developing DNSSEC as well, > with the help of the documentation that we made available and also by > direct contact via email and phone. > > Further information, as .pt trust anchor it's available at: > > http://www.dnssec.pt/ > > (also available by mailing list. Send an email to info(a)dnssec.pt to > subscribe) > > Best Regards, > > Pedro Veiga > >

1 0

RIPE58 minutes
by Jim Reid 10 Jan '10

10 Jan '10

Colleagues, a combination of miscommunication and confusion by the WG co-chairs has meant that the RIPE58 minutes went astray. Until now.... Sorry about that. I thought the minutes had been circulated just before RIPE59. They hadn't. And then assumed in Lisbon that the WG's silence about the RIPE58 minutes meant they could be approved by the WG. Which was wrong too. Oh well. Apologies are also due to the NCC staff who (a) sent your WG co-chairs the minutes before RIPE58 ended; (b) politely nagged us a few times to get the minutes out; (c) had extra hassle keeping the WG web pages up to date. Here they are. Please submit any comments or corrections to the list.

1 0