- dns-wg - mailman.ripe.net

.arpa ns changes
by James Mitchell 15 Apr '22

15 Apr '22

Dear network operators and other interested parties: This is advance notice that beginning 25 April, the hostnames for the nameservers for the .ARPA zone are planned to change. The new names will correspond to the same IP addresses that already provide the service. This change is planned occur in two phases. On Monday, April 25, the A, C, and E nameservers will change to their new hostnames. The remaining nameservers will change one week later on Monday, May 2. We do not expect any issues to arise from these changes. The work is being done as described in RFC 9120, in coordination with our root zone management partner Verisign and the IAB. Kind regards, James Mitchell Internet Assigned Numbers Authority

1 0

DNS and K-root Quarterly Planning Q2 2022
by Paul de Weerd 31 Mar '22

31 Mar '22

Dear colleagues, We've prepared our quarterly plans for our DNS services, including K-root. Please find them at https://www.ripe.net/support/documentation/quarterly-planning/dns-and-k-root We hope that by providing these plans, we can better inform the community of the ongoing work on the DNS services we operate and get feedback on our work. If you have any input on these plans or suggestions for future work, please reach out to us. Kind regards, Paul de Weerd RIPE NCC

1 0

Survey on DNS resolver operations and DNSSEC
by Moritz Müller 21 Mar '22

21 Mar '22

*co-chair hat off* Hi everyone, The DNS Security Extensions (DNSSEC) add integrity and authenticity to the Domain Name System (DNS). Now, more than 17 years after their standardization, we would like to hear from DNS recursive resolver operators about their experience with DNSSEC. For this reason, we have set up a short survey. It’s directed mainly towards organisations that run a recursive resolver. Filling out the survey should take roughly 5 to 10 minutes. https://forms.gle/FxTD9FofaogdvLqcA (link directs to Google Forms) This survey is carried out by SIDN Labs (https://sidnlabs.nl) and by the Swedish Internet Foundation (https://internetstiftelsen.se/en/) You can contact us via email: moritz.muller(a)sidn.nl Please excuse us, if you have received this email via different mailing lists. — Moritz Müller Research Engineer at SIDN Labs

1 0

Last call and final reminder for nominations to the 2022 Rob Blokzijl Award
by Carsten Schiefner 14 Mar '22

14 Mar '22

[Apologies for cross-posting to various RIPE lists] Dear DNS WG members - this is the last call and final reminder for nominations to the 2022 Rob Blokzijl Award that will be accepted until this Friday, 18th March, at 23:59 UTC. In seeking nominations for this prestigious award, which was created to celebrate Rob's contributions to the development of the Internet, the Award Committee (https://rob-blokzijl-foundation.org/2021/11/22/2022-award-committee/) is interested to receive nominations of those who have reflected Rob's approach in either a technical or operational capacity. Please give some consideration to nominating individuals - but also teams and groups of people! - in your own community and/or the wider industry in the RIPE region who, in your opinion, deserve to be recognised for their work to make the internet and/or internet community better. To specifically have this emphasised again after some according queries: nominations of teams and groups of people are very well possible and wished for as well in case their collective work would match the criteria of the call as laid out! The Award Committee is particularly interested to receive nominations of contributors who, in addition to their own contributions, have also supported and enabled others anywhere in the world. Also, the Award Committee would like to encourage those making nominations to consider not only the community members in the later stages of their careers or who are widely known but also those who may have contributed greatly in the springtime of their career or discreetly for the greater good or who may be considered to be part of an unrepresented group. And last but not least: those of you who previously have made a nomination other than Wilfried Woeber, the 2018 awardee, may want to consider resubmitting a nomination. The complete details of the call and the nomination process can be found at: https://rob-blokzijl-foundation.org/2021/11/25/call-for-nominations-2022/ Best wishes and kind regards Carsten (on behalf of the Award Committee)

1 0

RIPE DNS working group: Call for topics for RIPE 84
by Shane Kerr 07 Mar '22

07 Mar '22

Dear Colleagues, RIPE 84 is fast approaching. This is especially exciting because at least part of the community will be able to meet in person in Berlin. This e-mail is our official call for topics at the RIPE DNS working group session at the upcoming meeting. We're currently scheduled for 2022-05-19 (Thursday, 19 May 2022) at 11:00 CEST (09:00 UTC). Please send your presentation proposals, discussion topics, or anything you think that will be informative, important, and/or interesting for DNS fans in the RIPE community to <dns-wg-chairs(a)ripe.net>. As this is a hybrid meeting, both in-person and remote participation in the working group is possible. Cheers, -- Shane

1 0

follow up of "Update RIPE's DNS Zonemaster"
by Nick Cao 22 Feb '22

22 Feb '22

When doing a DNSSEC algorithm rollover from ecdsap256sha256 to ed25519 today, I got the error 'Unknown cryptographic algorithm' when updating ds-rdata field. A quick google search led me to https://www.ripe.net/ripe/mail/archives/dns-wg/2021-January/003796.html, which dates back to more than a year ago. It seems that the zonemaster deployment has not been updated to day, thus I would like to ask about the current progress.

5 7

EU: DNS abuse study
by Hank Nussbacher 07 Feb '22

07 Feb '22

5 4

IU and publc resolvers
by Jaap Akkerhuis 06 Feb '22

06 Feb '22

Talking about the EU and public resolevsr, ENISA also just published a report about this subject: <https://www.enisa.europa.eu/news/enisa-news/why-security-concerns-drive-cus…>. You will recognize the some names in the "usual supects" list (Acknowledgements section). jaap

2 1

DNS4EU community comment draft proposal
by Joao Luis Silva Damas 06 Feb '22

06 Feb '22

Good morning, Some of you may have already seen this in the cooperation wg mailing list but then again, some may not, so here it goes. We also encourage anyone with opinions on the matter to express them and/or contribute to the statement Regards Joao Damas For the dns-wg chairs ================================================================================= From: Desiree Miloshevic <dmiloshevic(a)donuts.email> To: cooperation-wg(a)ripe.net Dear members, dear all Further to the RIPE NCC’s summary of the DNS4EU Open House discussion posted bellow, and further to your witnessing of our our earlier 'transparent wordsmithing consultation' with other RIPE - WG Chairs I’d like to propose the following high level statement draft for your consideration. Julf and myself, as Co-Chairs are in agreement with this draft statement and Achilleas had excused himself due to his role at the EC. We’d like to know if there is some support from members for having a RIPE community response on this proposal? We would really appreciate your feedback or any comments you’d wish to make. Lastly we'd appreciate if the DNS WG Co-chairs would consider sharing this draft with their members too, since most of the DNS4EU discussion is taking place on that list. Many thanks for your consideration and the feedback, Desiree -- Coop WG Co-Chair Proposed DNS4EU RIPE community statement RIPE community believes that governance of the DNS resolution chain, which is such an important element of everybody's Internet connectivity, should involve all stakeholders and can not solely rely on legislation and regulatory oversight. RIPE Community hopes that any winning bidder will adhere to what we see as a fundamental property of the Internet, with a diverse and competitive landscape, anchored on the principles of multistakeholder Internet governance. RIPE Community believes that the responsibility of well-functioning Internet access including the DNS resolution is with the access providers. We believe it should stay that way. We understand that to be able to minimise some risks when the end user selects a random DNS resolver, a possible and feasible solution is to have the access provider run their local DNS resolvers and/or an additional DNS resolver as a back-up. We hope that the EU could allocate DNS4EU funds to the local Internet community and encourage Internet access providers to run their local DNS resolvers. Additionally, the funds can be also used towards the development of open source software for better and affordable DNS resolution services.

4 3

OARC 37 Schedule is Published
by Hazel Smith 03 Feb '22

03 Feb '22

Hello friends, The schedule for OARC 37 is now published and can be viewed here: https://www.dns-oarc.net/oarc37. Registration is required to be able to attend. The attendees have an option to attend in-person or online. In-person attendees please read about the Covid-19 protocol that's published on the OARC 37 website. Please remember to sign-up for Mattermost chat <http://chat.dns-oarc.net/> and join the Workshops channel. Thank you, Hazel Smith DNS-OARC Programme Committee -- Hazel Smith Site Reliability Engineer // Google Cloud, London hazelesque(a)google.com sre.google

1 0