Minutes of the DISI BoF - RIPE 39, Bologna, May 2 2001, 9:15 Chair: Henk Uijterwaal (HU) RIPE NCC Scribe: Mark Santcroos Slides are at: http://www.ripe.net/ripencc/pub-services/np/DISI//Talks/0105_DISI HU welcomes everyone. Agenda: 1- What is this BoF about? 2- Administrative matters 3. DISI 4. CSIRS 5. Discussision 6. The future 7. AOB ---- 3. DISI presentation: Olaf Kolkman - RIPE NCC "DISI & DNSSEC on the reverse tree" slides are at: http://www.ripe.net/ripencc/pub-services/np/DISI//Talks/0105_DISI Questions: Q: Why don't you use IPv6? A: Because we want to gain experience first. Q: What about the 192.168.? A: -XXX- Q: What can an end user do to make his ISP secure their zone? A: We want to convince the ISP's to deploy this. Q: What kind of public key system used? A: RSA is recommended, in theory all protocol can be used in parallel. But to get real success we have to choose one. That probably will be RSA. Q: How easily can we go to another encryption protocol, if for example one encryption scheme gets cracked. A: Depending on how long signatures are valid, a change of the protocol can be done within 1 day. But this depends on a lot of parameters. Q: Is there enough experience yet to determine how much effort it is to do actual implementation of this. A: Takes more CPU power for signing. Packet sizes grow. ---- 4. Presentation: Yuri Demchenko - Terena "CSIRS coordination for Europe and extended incident handling standardization" Slides are at: http://www.ripe.net/ripencc/pub-services/np/DISI//Talks/0105_DISI_YD No questions. ------ 6. The future HU asks how to go ahead with this, whether to create a new working group, join an existing working group etc. There are more issues related to security DoS, IPv6, Spam. Q: [chair of Anti-Spam WG] Is a merge going on between the various security-related WG's? A1: Not that we are aware off. A2: We want to keep them seperate. HU asks for a chair. No response. He will setup a mailing list. --- 8. AOB OK offers to give an experimental presentation about DNNSEC. This presentation is still under development and will be given in the future. The attendees welcome that and OK gives his presentation. --- HU thanks all the attendees and closes the WG session. ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal@ripe.net RIPE Network Coordination Centre WWW: http://www.ripe.net/home/henk Singel 258 Phone: +31.20.5354414 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ As long as you don't tell your friends how I played the hand, then I won't tell my friends how you defended it. (Anonymous)