- dns-wg - mailman.ripe.net

Lower TTLs for NS and DS records in reverse DNS delegations
by Anand Buddhdev 03 Dec '21

03 Dec '21

Dear colleagues, Users may request reverse DNS delegation by creating "domain" objects in the RIPE Database. Such domain objects must contain "nserver" attributes to specify the name servers for a reverse DNS zone, and may contain "ds-rdata" attributes, to specify delegation signer (DS) records. When the RIPE NCC publishes these records in the appropriate parent zones, the Time to Live (TTL) of all these records is set at 172800 (two days). The TTL of delegation NS records may be overridden by the TTL of NS records from a zone's apex. Alternatively, many large resolvers ignore the TTL values of NS records and cap them at much lower values such as 21600. Finally, there is no way for a zone operator to change the TTL of a DS record, which is only present in a parent zone. Long TTLs can cause problems for users when they want to change their name servers or perform DNSSEC key roll-overs. A long TTL on a DS record is especially harmful when a user needs to do a key roll-over in an emergency. We propose to lower, in the first quarter of 2022, the TTL on NS records to 86400 and on DS records to 3600. We welcome feedback or discussion about this, ideally via the DNS Working Group mailing list. If you prefer to send your feedback directly to us, you can email dns(a)ripe.net. Regards, Anand Buddhdev RIPE NCC

17 18

Re: [dns-wg] Lower TTLs for NS and DS records in reverse DNSdelegations
by Jørgen Hovland ☁️ 02 Dec '21

02 Dec '21

1 0

DNS wg co-chair selection: candidates
by João Damas 19 Nov '21

19 Nov '21

Dear all, The deadline for DNS WG co-chair candidate volunteering is now over. I am happy to announce that we have two great candidates. The period to express support for your preferred candidate(s) starts now and runs until November 24th 2021. Shane Kerr and myself, as continuing wg co-chairs hope to announce consensus at the DNS WG session during RIPE 83 Below find the candidate names and a few words from each =============================================================== Moritz Müller ----------------- Dear RIPE WG, I would like to volunteer to become a DNS working group co-chair. As a frequent participant and an occasional presenter at this working group I would like to help making sure that the program of the working group meetings continues to stay interesting and relevant. I'm working for the research department of the Dutch ccTLD operator SIDN for more than 6 years. There, amongst other topics, I have been studying different aspects of DNSSEC and domain name abuse. Also, I'm a guest researcher at the University of Twente in the Design and Analysis of Communication Systems group (DACS). I believe that my experience working in industry and academia will help me finding and selecting speakers that provide relevant and novel insights to the working group members. Please feel free to contact me in case of any questions or if you would like to get to know me a bit better. Email: moritz.muller(a)sidn.nl =============================================================== Brett Carr —————— Over the past 20 plus years I have worked with DNS holding a variety of industry related roles ranging from working for a global ISP to working at RIPE NCC (Leading the team who run K Root). I have also worked at ICANN (Assisting with the GTLD Programme) and for the last 13 years Nominet, helping to keep .uk safe and stable. I have designed, deployed and managed DNS and DNSSEC implementations both small and large and have been responsible for designing and operating Nominet’s GTLD DNS/DNSSEC Platform which has now grown to operating 80 TLDs. I am an experienced leader having led various engineering teams across operations during my time at Nominet. I have and continue to enjoy playing an active role in the DNS Community, giving presentations at OARC, RIPE and ICANN amongst others. I’m currently serving as the Vice Chair of the CSC at ICANN, I am an active member of the ICANN TLD Ops steering committee and have been a member of the OARC PC for the past year. I would relish the challenge of working with the other chairs to bring some fresh ideas to the DNS-WG. =============================================================== Regards, see you soon, Joao on behalf of the DNS WG co-chairs

15 23

[Ext] Re: DNS4EU?
by Andrew Campling 16 Nov '21

16 Nov '21

Those of you with an interest in the DNS4EU project may find the discussion that we had on my weekly call yesterday helpful - the recording is accessible at https://419.consulting/encrypted-dns/f/dns4eu. Please email me directly if you'd like a copy of the slides and/or to be added to the invitation list for future calls. Andrew

1 0

Re: [dns-wg] DNS4EU?
by Andrew Campling 15 Nov '21

15 Nov '21

I'll be giving an update on DNS4EU on my weekly encrypted DNS call next Monday and will cover the points in the presentation at the HLIG meeting yesterday. I've invited the Commission team to join but can't guarantee that they will be on the call at the moment. Please email me directly if you don't currently attend the calls and would like an invitation - they take place every Monday at 16:00 UTC. Recordings of past calls are accessible at https://419.consulting/encrypted-dns. Andrew -----Original Message----- Date: Thu, 11 Nov 2021 11:15:16 +0100 From: Chris Buckridge <chrisb(a)ripe.net> To: Hank Nussbacher <hank(a)efes.iucc.ac.il> Cc: dns-wg(a)ripe.net Subject: Re: [dns-wg] DNS4EU? Message-ID: <8E01ADB6-5AF2-4EDB-BB89-BEA4E4C31EFC(a)ripe.net> Content-Type: text/plain; charset="utf-8" Hi Hank, all, A number of us from the RIPE NCC (and others from the RIPE community) were in yesterday?s HLIG meeting. There was a presentation on DNS4EU, and I?m trying to track down those slides and whether they?ll be made public - at this point, there?s nothing on the site, but we?ll certainly share any slides (or a public report on the meeting) when they become available. The significant output was that the Commission expects to have a public Call for Proposals around the end of this year, as part of Connecting Europe Facility (CEF 2) programme, for an EU-governed public DNS resolver service. Obviously the CfP will contain more detail when it is made public. This is also in line with the Commission?s statement back in June 2021 in section 1.6 of this document: https://data.consilium.europa.eu/doc/document/ST-10137-2021-ADD-1/en/pdf In the meantime, others may be able to share insights, and we will share links to public documents from yesterday?s session as we obtain them. Cheers Chris

3 2

DNS wg co-chair selection: candidates
by Andrew Campling 11 Nov '21

11 Nov '21

>From a strong field, I would like to cast a vote for Brett Carr as co-chair. Andrew

3 2

Vote for Brett Carr as Chair
by Peter Lowe 11 Nov '21

11 Nov '21

Hi there, I'd just like to cast my vote for Brett Carr as the co-chair. Thanks, - Peter -- Peter Lowe Domain Intelligence Lead @ DNSFilter https://dnsfilter.com/ :: peter(a)dnsfilter.com

1 0

CFP for DINR 2021 workshop for early DNS research - deadline extended
by Moritz Müller 27 Oct '21

27 Oct '21

Hi RIPE DNS-WG, We wanted to let you know that we have extended the deadline for the virtual workshop on "DNS and Internet Naming Research Directions" (DINR) abstracts to this Friday, October 29. We encourage folks to submit an abstract about a topic you'd like to present, or a short paragraph if you'd like to attend but not present. The prior annoucnement: We would like to invite you to our upcoming virtual workshop on "DNS and Internet Naming Research Directions" (DINR). We will be holding this workshop virtually over Zoom on 2021-11-16 from 14:00 to 20:00 UTC (that's 07:00-13:00 PDT on the US west coast). If you're intereseted in DNS-related topics, infrastructure, have early early DNS or naming work to share, or you want to hear about other people's work in those areas, we'd love to have you join us. The principle focus of the workshop will be on DNS and Internet naming, particularly on open problems, preliminary work, and tools that help both. We're planning for a very interactive day of discussion and short talks. We are soliciting short (1 page text + 1 page references) abstracts from people who are interested presenting. Abstracts are due soon (now: October 29, was: Oct. 26), but they're short. Co-chairs are John Heidemann and Wes Hardaker (both at USC/ISI). For details about DINR2021, see https://ant.isi.edu/events/dinr2021/ . It builds on last year's DINR2020, see https://ant.isi.edu/events/dinr2020/ what we learned. In addition, we will have a short tutorial about the DIINER experimental DNS testbed and datasets on Nov. 17. For details about the tutorial, see https://ant.isi.edu/events/dinr2021#tutorial Thanks, DINR2021 co-chairs

1 0

Call for RIPE DNS Working Group Chair
by Joao Luis Silva Damas 22 Oct '21

22 Oct '21

Dear Colleagues, This is a call for nominations or volunteers to co-chair the RIPE DNS working group. ************************************************************************************* Please DO NOT reply to this message if you wish to propose a volunteer. ************************************************************************************* Call for RIPE DNS Working Group Chair ------------------------------------------------------ In accordance with the chair selection process we announce that the term of one of our co-chairs (Dave Knight) will soon expire and we would like to invite volunteers, or nominations for someone to become a co-chair of the DNS working group. Anyone may volunteer, and anyone may be nominated by someone else. Note that having served two terms, in accordance with the selection process Dave is not eligible. To do this, please send a mail to <dns-wg-chairs at ripe.net> before Tue 2nd November 2021. It would be helpful for candidates to give some words as to why they think they ought to be a co-chair, what new ideas, or improvements they might bring, and so on. We will publish the list of volunteers, along with anything the volunteers to include with their nomination, to this mailing list on Wednesday 3rd November 2021. Discussion and support (or opposition) for each candidate can then be offered on the list. At the DNS working group session at RIPE 83, Joao and Shane hope to announce consensus based on the mailing list discussion. Timeline -------- Tue 19 Oct This call for volunteers posted to the dns-wg mail list Tue 2 Nov Deadline for volunteers Wed 3 Nov List of volunteers and call for support posted to the mail list Wed 24 Nov Deadline for showing support for volunteers on the mail list Thu 25 Nov DNS WG session at RIPE 81 References ---------- The RIPE working group chair job description is included in ripe-692: https://www.ripe.net/publications/docs/ripe-692 The DNS working group chair selection process is documented here: https://www.ripe.net/participate/ripe/wg/dns/dns-wg-chair-selection-process We have 3 co-chairs so the term is 3 years. The current approach was announced on this mailing list on 2018-07-17: https://www.ripe.net/ripe/mail/archives/dns-wg/2018-July/003566.html As always, please feel free to reach out to any of the chairs directly, to us as a group at dns-wg-chairs at ripe.net, or discuss this or any other any relevant topic on this mailing list. Kind regards, Joao, for the dns-wg chairs

1 1

Draft RIPE DNS working group agenda for RIPE 83
by Shane Kerr 22 Oct '21

22 Oct '21

Dear colleagues, We've got a draft agenda for the DNS working group at RIPE 83. * Welcome & Agenda Bashing * DNS Working Group Co-Chair Selection * PROXYv2 in DNS Peter van Dijk & Pieter Lexis from PowerDNS * Measuring RSA 4096 validation Geoff Huston & Joao Damas from APNIC * Accessing the Public Suffix List as a service Peter Thomassen from deSEC * BIND 9.16 Petr Špaček from ISC * RIPE NCC DNS Update Anand Buddhdev from RIPE NCC You may ask yourself how this can possibly all fit in 60 minutes. We've basically given everyone 10 minutes and will use a combination of iron discipline and nervously watching the clock the whole time. We also apologize for only having 4 of our 7 presenters named a variation of Peter. We'll try to improve our already rigorous process for future meetings, to maximize our Peter-delivered content. On behalf of the RIPE DNS working group co-chairs, -- Shane

1 0