June 2017 - dns-wg - mailman.ripe.net

New on RIPE Labs: A Virtual Canary-in-the-Coalmine for the DNSSEC Root Key Rollover
by Mirjam Kuehne 27 Jun '17

27 Jun '17

Dear colleagues, On RIPE Labs Roland van Rijswijk of SURFnet describes the DNSSEC root key rollover, why you should care about it and how you can test your resolvers: https://labs.ripe.net/Members/roland_van_rijswijk/a-virtual-canary-in-the-c… Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: Recursives in the Wild: Engineering Authoritative DNS Servers
by Mirjam Kuehne 26 Jun '17

26 Jun '17

Dear colleagues, By analysing how resolvers select authoritative name servers in the wild, Moritz Müller of SIDN investigated how DNS operators are able to reduce DNS response times. Please read the article on RIPE Labs: https://labs.ripe.net/Members/moritz_muller/recursives-in-the-wild-engineer… Kind regards, Mirjam Kühne RIPE NCC

1 0

Online DS and signing algorithm test
by Roland van Rijswijk - Deij 21 Jun '17

21 Jun '17

Hi all, (apologies for cross-posting) As some of you may have picked up at the last ICANN DNSSEC workshop or at DNS OARC, we've started a project to track the impact of the Root KSK rollover over the coming months (dubbed the "Root Canary" project, see also https://rootcanary.org for rudimentary info). As a spin-off of this project, NLnet Labs and SURFnet have set up an online test that determines which DS and signing algorithms the resolver(s) configured on your system support. You can find the test here: https://rootcanary.org/test.html The test includes 4 DS algorithms (SHA1, SHA256, SHA512, GOST) and all signing algorithms. It does not do a full NSEC vs. NSEC3 test, as we assume that NSEC3 support likely also means NSEC is supported. Feedback/suggestions are of course welcome , please contact me and/or Willem Toorop at NLnet Labs. Cheers, Roland -- -- Roland M. van Rijswijk - Deij -- SURFnet bv -- w: http://www.surf.nl/en/about-surf/subsidiaries/surfnet -- e: roland.vanrijswijk(a)surfnet.nl

1 0

New on RIPE Labs: Finding Open DNS Resolvers on IPv6
by Mirjam Kuehne 16 Jun '17

16 Jun '17

Dear colleagues, Please read this new article by Luuk Hendriks on how to find open DNS resolvers on IPv6: https://labs.ripe.net/Members/luuk_hendriks/finding-open-dns-resolvers-on-i… Kind regards, Mirjam Kühne RIPE NCC

1 0

APNIC and RIPE NCC Joint Research Programme
by Anand Buddhdev 08 Jun '17

08 Jun '17

Dear all, The RIPE NCC and APNIC will be carrying out research into the DNS root server system later this month. We’ve published an article on RIPE Labs providing a brief outline of the next step in the research programme. https://labs.ripe.net/Members/alun_davies/apnic-labs-research-on-dns-root-s… Best regards, Anand Buddhdev Senior Engineer, RIPE NCC

1 0