- dns-wg - mailman.ripe.net

Revised Operating Instructions for e164.arpa (ENUM)
by Marco Hogewoning 03 May '19

03 May '19

Dear colleagues, The RIPE NCC is the operator of the e164.arpa zone (ENUM) and maintains the associate registry in accordance with the instructions of the Internet Architecture Board (IAB). As delegations are based on E.164 country code allocations, any changes to the registry are coordinated with and approved by the respective holders of the E.164 country code via the ITU’s Telecommunications Standardisation Bureau (TSB). Recent checks have shown that over time, many of the current 57 delegations have deteriorated – they are no longer technically functional or the contacts details for the country code registry have not been updated. Seeking advice from the IAB on these matters, they agreed to revise the instructions to address these issues. Among the changes is new text regarding the deletion of delegations and instructions that allow the RIPE NCC to do periodic checks on registry data. This will allow us to initiate a process to review the existing delegations and coordinate with the registries, governments and the TSB to mitigate and correct any errors. In cases where we are unable to correct an error, we will advise the government involved to remove the delegation, until such time that a new registry can assume responsibility for the country code and restore its technical functionality. ITU Study Group 2, which is responsible for the E.164 number registry, shared our concerns and at its last meeting agreed to update its instructions to the TSB to reflect these changes. As we remain committed to coordinating any delegations with TSB, the Member States involved and Study Group 2, we welcome the study group’s renewed interest in the topic and its support in reviewing and updating these registrations. The new instructions have now been published on our website and, with the IAB’s approval, we will now operate the registry in accordance with these. The instructions are available here: https://www.ripe.net/manage-ips-and-asns/dns/enum/iab-instructions Kind Regards, Marco Hogewoning Senior External Relations Officer, RIPE NCC, Ted Hardie For the IAB

3 2

Re: [dns-wg] New on RIPE Labs: Making the DNS More Private with QNAME Minimisation
by Wouter de Vries 29 Apr '19

29 Apr '19

On Mon, Apr 29, 2019 at 08:43:52AM +0100, Piete Brooks wrote: > > In the case your resolver was doing qmin, the third line should have read something like: > > myip -> 185.49.141.12 TXT b.qnamemin-test.internet.nl (omitting the last label: a). > > And a second typo would allow me to understand it - was that a TXT or an NS lookup? I blame it on early monday. That should have been NS indeed :-). Also your other comment about the IP is correct, sorry about that. So the final request/response sequence should happen between myip and 185.49.141.13.

1 0

New on RIPE Labs: Making the DNS More Private with QNAME Minimisation
by Mirjam Kuehne 29 Apr '19

29 Apr '19

Dear colleagues, DNS queries can contain a lot of sensitive information about Internet users. Query name minimisation (qmin) limits the information revealed to what is actually necessary for a DNS name server to answer the query. Woute de Vries, Moritz Mueller and others did a study on qmin deployment and the associated challenges: https://labs.ripe.net/Members/wouter_de_vries/make-dns-a-bit-more-private-w… Kind regards, Mirjam Kühne RIPE NCC

5 5

RIPE 78 DNS working group draft agenda v2
by Shane Kerr 10 Apr '19

10 Apr '19

Colleagues, Here's an updated draft agenda for the DNS working group session in RIPE 78 (we overlooked an interesting submission from Roland van Rijswijk-Deij). We're meeting on Thursday 23 May from 16:00 to 17:30. 1. Administrivia 5 minutes 2. Overview of the DNS Privacy Software landscape by Carsten Strotmann 30 minutes 3. unwind, a validating DNS recursive nameserver by Carsten Strotmann 5 minutes 4. DNS flag day 2019 and beyond by Petr Špaček @ CZ.NIC 15 minutes 5. Tag You're It!: Revisiting the Reality of DNSSEC Keytags by Roland M. van Rijswijk-Deij 15 minutes 6. root KSK Rollover Wrap-up by the DNS working group chairs 15 minutes 7. DNS-OARC Summary by Dave Knight 10 minutes See you in Reykjavík! -- The RIPE DNS Working Group Chairs Dave, Joao, and Shane

1 0

RIPE 78 DNS working group draft agenda
by Shane Kerr 08 Apr '19

08 Apr '19

Colleagues, Here's a draft agenda for the DNS working group session in RIPE 78. We're meeting on Thursday 23 May from 16:00 to 17:30. 1. Administrivia 5 minutes 2. Overview of the DNS Privacy Software landscape by Carsten Strotmann 30 minutes 3. unwind, a validating DNS recursive nameserver by Carsten Strotmann 5 minutes 4. DNS flag day 2019 and beyond by Petr Špaček @ CZ.NIC 15 minutes 5. root KSK Rollover Wrap-up by the DNS working group chairs 20 minutes 6. DNS-OARC Summary by Dave Knight 10 minutes See you in Reykjavík! -- The RIPE DNS Working Group Chairs Dave, Joao, and Shane

1 0

Call for contributions to the RIPE 78 meeting of the dns-wg
by Dave Knight 02 Apr '19

02 Apr '19

Dear colleagues, The RIPE 78 meeting in Reykjavik is a few weeks away and we’d like to form our agenda. Please submit your presentation ideas, or suggestions for discussions to <dns-wg-chairs(a)ripe.net>. Please don’t submit anything using the meeting submission web form, it’s not intended for submission of content to working groups. Thanks! dave, on behalf of the working group chairs

2 2

How to determine the last message in sequence in DNS TCP responce
by Владимир Мартьянов 27 Feb '19

27 Feb '19

I make DNS zone transfer request (aka AXFR) via TCP to the server. The answer is too big (>100Kb), so it could not be sent in one TCP message. So the server send me a sequence of messages. How can I determine which message is the last? I can't found anything about it's count in the first message. I can't found any special flag in the last one. I can't found anything about it in RFC1035. Could you please explain how to find "end of answer"?

3 2

New on RIPE Labs: Managing DNS Zones Using Git
by Mirjam Kuehne 04 Feb '19

04 Feb '19

Dear colleagues, Using zone files for managing the Domain Name System (DNS) zone data is the most basic and flexible way to manage the authoritative DNS data. In this post on RIPE Labs, Ondřej Caletka describes how the Git version control system can be used to store zone file history and protect against errors: https://labs.ripe.net/Members/ondrej_caletka/managing-dns-zones-using-git Kind regards, Mirjam Kühne RIPE NCC

1 0

DNSViz Relocates to DNS-OARC
by Matthew Pounsett 01 Feb '19

01 Feb '19

OARC is pleased to announce that dnsviz.net has moved to join many other tools that we support for the DNS community. DNSViz, Casey Deccio's excellent DNSSEC debugging tool, was initially developed and hosted at Sandia National Laboratories, and has been hosted most recently at Verisign. We'd like to thank them both for providing that service for many years, and Verisign for donating the hardware that DNSViz will continue to live on in the near future. We're happy to be picking up the torch! Casey continues to be the primary developer and maintainer of the application, while OARC takes on the role of hosting and operating the online service. Unfortunately, we will be without the historical functions of the tool for a little over a week while the hardware is in transit between data centers, and DNSVIZ runs on an interim platform. Full access to the historical data will be restored once the hardware is brought back online during the week of February 11th. Matt Pounsett DNS-OARC Systems Engineering

1 0

Call For Presentations - DNS-OARC Workshop, Thailand, Bangkok, 12th/13th May 2019
by Dave Knight 06 Dec '18

06 Dec '18

Colleagues, The 30th DNS-OARC Workshop will take place at the Shangri-La Hotel, Bangkok, Thailand, on May 12th and 13th 2019, hosted by ICANN. (Note that several co-located meetings are taking place immediately prior to the DNS-OARC Workshop, including the GDD Industry Summit, May 6th-9th, the Registrations Operations Workshop, May 9th, and the ICANN DNS Symposium, May 10th-11th.) The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted until the start of the morning session on day two. There will be a Members-only session during the workshop, which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. Workshop Milestones: 05 Dec 2018 - Submissions open via Indico 22 Feb 2019 - Deadline for submission 01 Mar 2019 - Initial Contribution list published 22 Mar 2019 - Full agenda published 03 May 2019 - Deadline for slideset submission 12 May 2019 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/31/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Dave Knight, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0