- techsec-wg - mailman.ripe.net

Proposed agenda TechSec, RIPE 46, Amsterdam
by ted＠tednet.nl 12 Aug '03

12 Aug '03

A. Administrative Matters - scribe - list of participants - agenda - minutes B. Disi report, Olaf Kolkman - 20 minutes C. Internet draft draft-jones-opsec-00.txt, presentation and discussion, George Jones - 20 minutes D. Update on Fonkey and IETF related developments at IETF Yuri Demchenko - 15 minutes ---------------------- Comments, additions, anything else? -- ted

1 0

Announcement DNSSec Training Course
by RIPE NCC Training 12 Aug '03

12 Aug '03

------- Dear Colleagues, [apologies for duplicate postings] As a service to its members the RIPE NCC offers the DNSSec Training Course. The main objective of the DNSSec Training Course is to provide LIRs with sufficient background to be able to deploy DNSSec in their own organisation as soon as the protocol is standardised. This course also explains the specific procedures set up by the RIPE NCC to to secure the in-addr.arpa zone. The Domain Name System (DNS) is one of the main parts of the Internet infrastructure. At the moment DNS lacks a mechanism to establish the authenticity and integrity of the data it provides. DNSSec is a set of extensions to provide this end-to-end authenticity and integrity. It is currently being developed within the IETF dnsnext Working Group. The protocol is about to be finalised and the code implementing the protocol is available in alpha releases. The DNSSec course consists of two parts: an "Introduction to DNSSec" and a real life demonstration. The "Introduction to DNSSec" will cover: - DNS security threats - DNSSec security mechanisms - DNSSec server protection - DNSSec data protection - Delegation issues - Key management issues - Current developments Examples are based on the BIND name server. Please note that DNSSec is an advanced course. It will: - NOT teach the basics of DNS. - NOT describe how to receive Internet resources from the RIPE NCC not describe how to operate a Local Internet Registry (LIR) The target audience of the course are technical staff of LIRs: e.g. network & system operators, engineers, etc. This course is not intended for administrative or management staff (e.g. Hostmasters). It is assumed that all attendees are familiar with common DNS terminology, have a practical knowledge in operating DNS servers and are interested in learning the concepts and mechanisms that DNSSec offers. The DNSSec course is conducted in the English language and is free of charge, since it is covered by the membership fee. More information about the DNSSec Training Course can be found at: http://www.ripe.net/training/dnssec/ REGISTRATION: You can register for a course at the following URL: http://www.ripe.net/cgi-bin/trainingform.pl.cgi Or by completing the registration form at the end of this e-mail and replying to <training(a)ripe.net> In order to register for a DNSSec Training Course you must be an employee of an LIR and either : - be an LIR contact - be confirmed by an LIR contact. LIR contacts are those employees of an LIR who are registered with the RIPE NCC as authoritative contact persons. It is expected that most of those interested in the DNSSec Training Course will not be an authorative contact persons for their LIR, and therefore will be refused by the course registration "robot". In order to be admitted to the course, a confirmation e-mail must be sent to <training(a)ripe.net>. Please approach the LIR contacts from your organisation personally, since the identity of LIR contacts is confidential, and the RIPE NCC is unable to divulge contact persons for any given LIR. Kind Regards, The RIPE NCC Training Team COURSE DATES AND VENUES ======================= Date: Monday 18 August 2003 Time: 0900 - 1700 Location: Dubai, United Arab Emirates AND: Date: Friday 19 September 2003 Time: 0930 - 1700 Location: Amsterdam, The Netherlands AND: Date: Friday 10 October 2003 Time: 0900 - 1700 Location: Istanbul, Turkey AND: Date: Friday 28 October 2003 Time: 0900 - 1700 Location: Rome, Italy REGISTRATION FORM ================= %START PART 1 - Registration 1) Your name Enter First name, Last name in full e.g. John Doe Mary-Beth Walton # NAME [ ] 2) Your Registry ID (format: country-code.<name of registry>) # REG [ ] 3) Your e-mail address # EMAIL [ ] 4) Your NIC handle (optional) # NICHANDLE [ ] 5) The course you plan to attend (date and location) # COURSE [ ] %END

1 0

Agenda points TechSec-wg, RIPE 46
by ted＠tednet.nl 30 Jul '03

30 Jul '03

Hi, RIPE 46 is approaching (1-5 September, 2003, Amsterdam) and so is the next TechSec-wg meeting. Please send in your agenda points. We have a 1.5 hour session on Wednesday from 16:00 to 17:30. Likely we will have already: - A presentation by George Jones on his draft on Operational security: http://www.ietf.org/internet-drafts/draft-jones-opsec-00.txt hopefully followed by ample discussion about it. - An update by Yuri Demchenko (NLnet Labs) on Fonkey and PKI related developments at the IETF (15 min.). - A TF-CSIRT update by Baiba Kaskina (TERENA) (5 min.). - The Disi report, Olaf Kolkman (20 min?). What else??? -- ted

1 0

ANNOUNCEMENT DNSSec Training Courses
by RIPE NCC Training 03 Jun '03

03 Jun '03

Dear Colleagues, [apologies for duplicate postings] As a service to its members the RIPE NCC offers the DNSSec Training Course. The main objective of the DNSSec Training Course is to provide LIRs with sufficient background to be able to deploy DNSSec in their own organisation as soon as the protocol is standardised. This course also explains the specific procedures set up by the RIPE NCC to to secure the in-addr.arpa zone. The Domain Name System (DNS) is one of the main parts of the Internet infrastructure. At the moment DNS lacks a mechanism to establish the authenticity and integrity of the data it provides. DNSSec is a set of extensions to provide this end-to-end authenticity and integrity. It is currently being developed within the IETF dnsnext Working Group. The protocol is about to be finalised and the code implementing the protocol is available in alpha releases. The DNSSec course consists of two parts: an "Introduction to DNSSec" and a real life demonstration. The "Introduction to DNSSEC" will cover: - DNS security threats - DNSSec security mechanisms - DNSSec server protection - DNSSec data protection - Delegation issues - Key management issues - Current developments Examples are based on the BIND name server. Please note that DNSSec is an advanced course. It will: - NOT teach the basics of DNS. - NOT describe how to receive Internet resources from the RIPE NCC not describe how to operate a Local Internet Registry (LIR) The target audience of the course are technical staff of LIRs: e.g. network & system operators, engineers, etc. This course is not intended for administrative or management staff (e.g. Hostmasters). It is assumed that all attendees are familiar with common DNS terminology, have a practical knowledge in operating DNS servers and are interested in learning the concepts and mechanisms that DNSSec offers. The DNSSec course is conducted in the English language and is free of charge, since it is covered by the membership fee. More information about the DNSSec Training Course can be found at: http://www.ripe.net/training/dnssec/ REGISTRATION: You can register for a course at the following URL: http://www.ripe.net/cgi-bin/trainingform.pl.cgi Or by completing the registration form at the end of this e-mail and replying to <training(a)ripe.net> In order to register for a DNSSec Training Course you must be an employee of an LIR and either : - be an LIR contact - be confirmed by an LIR contact. LIR contacts are those employees of an LIR who are registered with the RIPE NCC as authoritative contact persons. It is expected that most of those interested in the DNSSec Training Course will not be an authorative contact persons for their LIR, and therefore will be refused by the course registration "robot". In order to be admitted to the course, a confirmation e-mail must be sent to <training(a)ripe.net>. Please approach the LIR contacts from your organisation personally, since the identity of LIR contacts is confidential, and the RIPE NCC is unable to divulge contact persons for any given LIR. Kind Regards, The RIPE NCC Training Team COURSE DATES AND VENUES ======================= Date: Friday 4 July 2003 Time: 0900 - 1700 Location: Glasgow,United Kingdom AND: Date: Friday 18 July 2003 Time: 0900 - 1700 Location: Vienna, Austria AND: Date: Monday 18 August 2003 Time: 0900 - 1700 Location: Dubai, United Arab Emirates AND: Date: Friday 19 September 2003 Time: 0930-17:00 Location: Amsterdam, The Netherlands REGISTRATION FORM ================= %START PART 1 - Registration 1) Your name Enter First name, Last name in full e.g. John Doe Mary-Beth Walton # NAME [ ] 2) Your Registry ID (format: country-code.<name of registry>) # REG [ ] 3) Your e-mail address # EMAIL [ ] 4) Your NIC handle (optional) # NICHANDLE [ ] 5) The course you plan to attend (date and location) # COURSE [ ] %END

1 0

Signing the Root Zone to be discussed in TechSec WG @ Barcelona
by Daniel Karrenberg 13 May '03

13 May '03

Point C on the agenda below might be interesting for people on this list. Daniel ----- Forwarded message from Daniel Karrenberg <daniel.karrenberg(a)ripe.net> ----- Date: Tue, 13 May 2003 06:50:16 +0200 From: Daniel Karrenberg <daniel.karrenberg(a)ripe.net> To: techsec-wg(a)ripe.net Cc: meeting(a)ripe.net, webmaster(a)ripe.net, Lars-Johan Liman <liman(a)autonomica.se>, Yuri Demchenko <demch(a)nlnetlabs.nl>, "Olaf M. Kolkman" <olaf(a)ripe.net> Subject: Agenda TechSec-wg Barcelona TechSec-ers, Over the last few weeks there have been additional agenda points suggested. Because of other obligations I am a bit late with updating the agenda. My sincere apologies. Here is my suggestion so far. There should be time for more, so if you have relevant material, just be there and we will bash the agenda. (for Ted) Daniel ----- A. Administrative Matters - scribe - list of participants - agenda - minutes B. Disi report, Olaf Kolkman - 15 minutes Report on the status of the DISI project and the state of DNSSEC in the IETF. C. Signing the Root Zone, Johan Ihren (via Lars-Johan Liman) - 40 minutes Presentation on draft-ietf-dnsop-interim-signed-root-01.txt and draft-ihren-dnsext-threshold-validation-00.txt. Also some discussion whether the RIPE NCC should spend time on this. See also message <3EA54B21.3070307(a)ripe.net> from Andrei Robachevsky on the dns-wg and local-ir mailing lists. D. Fonkey project update: target applications, Yuri Demchenko - 15 minutes. Short information about the status of the project and description of target applications, including extended PGP keyserver, attributes/privilege server, location server. E. Overview of Related Activities Elsewhere, Yuri Demchenko - 20 minutes Information about activities and projects among CSIRT community (IETF INCH WG and IODEF development, CERT/CC and TF-CSIRT projects, usage of IRT object in RIPE NCC Database by CSIRT community). Short overview of PKI/AA activities and exploring interest of WG in providing more information about PKI/AA developments (in context of supporting PKI based RIPE NCC Improved Secure Communication System), including training courses. F. Any Other Business ----- End forwarded message -----

1 0

Agenda TechSec-wg Barcelona
by Daniel Karrenberg 13 May '03

13 May '03

TechSec-ers, Over the last few weeks there have been additional agenda points suggested. Because of other obligations I am a bit late with updating the agenda. My sincere apologies. Here is my suggestion so far. There should be time for more, so if you have relevant material, just be there and we will bash the agenda. (for Ted) Daniel ----- A. Administrative Matters - scribe - list of participants - agenda - minutes B. Disi report, Olaf Kolkman - 15 minutes Report on the status of the DISI project and the state of DNSSEC in the IETF. C. Signing the Root Zone, Johan Ihren (via Lars-Johan Liman) - 40 minutes Presentation on draft-ietf-dnsop-interim-signed-root-01.txt and draft-ihren-dnsext-threshold-validation-00.txt. Also some discussion whether the RIPE NCC should spend time on this. See also message <3EA54B21.3070307(a)ripe.net> from Andrei Robachevsky on the dns-wg and local-ir mailing lists. D. Fonkey project update: target applications, Yuri Demchenko - 15 minutes. Short information about the status of the project and description of target applications, including extended PGP keyserver, attributes/privilege server, location server. E. Overview of Related Activities Elsewhere, Yuri Demchenko - 20 minutes Information about activities and projects among CSIRT community (IETF INCH WG and IODEF development, CERT/CC and TF-CSIRT projects, usage of IRT object in RIPE NCC Database by CSIRT community). Short overview of PKI/AA activities and exploring interest of WG in providing more information about PKI/AA developments (in context of supporting PKI based RIPE NCC Improved Secure Communication System), including training courses. F. Any Other Business

1 0

Announcement RIPE NCC DNSSec Training Courses
by RIPE NCC Training 01 May '03

01 May '03

------- Dear Colleagues, [apologies for duplicate postings] As a service to its members the RIPE NCC offers the DNSSec Training Course. The main objective of the DNSSec Training Course is to provide LIRs with sufficient background to be able to deploy DNSSec in their own organisation as soon as the protocol is standardised. This course also explains the specific procedures set up by the RIPE NCC to to secure the in-addr.arpa zone. The Domain Name System (DNS) is one of the main parts of the Internet infrastructure. At the moment DNS lacks a mechanism to establish the authenticity and integrity of the data it provides. DNSSec is a set of extensions to provide this end-to-end authenticity and integrity. It is currently being developed within the IETF dnsnext Working Group. The protocol is about to be finalised and the code implementing the protocol is available in alpha releases. The DNSSec course consists of two parts: an "Introduction to DNSSec" and a real life demonstration. The "Introduction to DNSSEC" will cover: - DNS security threats - DNSSec security mechanisms - DNSSec server protection - DNSSec data protection - Delegation issues - Key management issues - Current developments Examples are based on the BIND name server. Please note that DNSSec is an advanced course. It will: - NOT teach the basics of DNS. - NOT describe how to receive Internet resources from the RIPE NCC not describe how to operate a Local Internet Registry (LIR) The target audience of the course are technical staff of LIRs: e.g. network & system operators, engineers, etc. This course is not intended for administrative or management staff (e.g. Hostmasters). It is assumed that all attendees are familiar with common DNS terminology, have a practical knowledge in operating DNS servers and are interested in learning the concepts and mechanisms that DNSSec offers. The DNSSec course is conducted in the English language and is free of charge, since it is covered by the membership fee. More information about the DNSSec Training Course can be found at: http://www.ripe.net/training/dnssec/ REGISTRATION: You can register for a course at the following URL: http://www.ripe.net/cgi-bin/trainingform.pl.cgi Or by completing the registration form at the end of this e-mail and replying to <training(a)ripe.net> In order to register for a DNSSec Training Course you must be an employee of an LIR and either : - be an LIR contact - be confirmed by an LIR contact. LIR contacts are those employees of an LIR who are registered with the RIPE NCC as authoritative contact persons. It is expected that most of those interested in the DNSSec Training Course will not be an authorative contact persons for their LIR, and therefore will be refused by the course registration "robot". In order to be admitted to the course, a confirmation e-mail must be sent to <training(a)ripe.net>. Please approach the LIR contacts from your organisation personally, since the identity of LIR contacts is confidential, and the RIPE NCC is unable to divulge contact persons for any given LIR. Kind Regards, The RIPE NCC Training Team COURSE DATES AND VENUES +++++++++++++++++++++++ Date: Friday 4 July 2003 Time: 0900 - 1700 Location: Glasgow,Scotland AND: Date: Friday 18 July 2003 Time: 0900 - 1700 Location: Vienna, Austria AND: Date: Friday 19 September 2003 Time: 0900 - 1700 Location: Amsterdam, The Netherlands REGISTRATION FORM +++++++++++++++++ %START PART 1 - Registration 1) Your name Enter First name, Last name in full e.g. John Doe Mary-Beth Walton # NAME [ ] 2) Your Registry ID (format: country-code.<name of registry>) # REG [ ] 3) Your e-mail address # EMAIL [ ] 4) Your NIC handle (optional) # NICHANDLE [ ] 5) The course you plan to attend (date and location) # COURSE [ ] %END

1 0

Agenda points TechSec-wg
by ted＠tednet.nl 26 Apr '03

26 Apr '03

Sofar the only contribution for the techsec-wg is the disi report. I will not be in Barcelona, Daniel Karrenberg will chair the meeting. The agenda will be: A. Administrative Matters - scribe - list of participants - agenda - minutes B. Disi report, Olaf Kolkman C. AOB Regards, -- ted

1 0

Agenda points
by ted＠tednet.nl 07 Apr '03

07 Apr '03

Hi, It's time again to submit your agenda points for the upcoming RIPE meeting in Barcelona, so that Daniel and I can prepare the agenda for the TechSec meeting. regards, -- ted

1 0

Announcement RIPE NCC DNSSec Training Courses
by RIPE NCC Training 17 Feb '03

17 Feb '03

Dear Colleagues, [apologies for duplicate postings] As a new service to its members the RIPE NCC offers the DNSSec Training Course. The main objective of the DNSSec Training Course is to provide LIRs with sufficient background to be able to deploy DNSSec in their own organisation as soon as the protocol is standardised. This course also explains the specific procedures set up by the RIPE NCC to to secure the in-addr.arpa zone. The Domain Name System (DNS) is one of the main parts of the Internet infrastructure. At the moment DNS lacks a mechanism to establish the authenticity and integrity of the data it provides. DNSSec is a set of extensions to provide this end-to-end authenticity and integrity. It is currently being developed within the IETF dnsnext Working Group. The protocol is about to be finalised and the code implementing the protocol is available in alpha releases. The DNSSec course consists of two parts: an "Introduction to DNSSec" and a real life demonstration. The "Introduction to DNSSEC" will cover: - DNS security threats - DNSSec security mechanisms - DNSSec server protection - DNSSec data protection - Delegation issues - Key management issues - Current developments Examples are based on the BIND name server. Please note that DNSSec is an advanced course. It will: - NOT teach the basics of DNS. - NOT describe how to receive Internet resources from the RIPE NCC not describe how to operate a Local Internet Registry (LIR) The target audience of the course are technical staff of LIRs: e.g. network & system operators, engineers, etc. This course is not intended for administrative or management staff (e.g. Hostmasters). It is assumed that all attendees are familiar with common DNS terminology, have a practical knowledge in operating DNS servers and are interested in learning the concepts and mechanisms that DNSSec offers. The DNSSec course is conducted in the English language and is free of charge, since it is covered by the membership fee. More information about the DNSSec Training Course can be found at: http://www.ripe.net/training/dnssec/ REGISTRATION: You can register for a course at the following URL: http://www.ripe.net/cgi-bin/trainingform.pl.cgi Or by completing the registration form at the end of this e-mail and replying to <training(a)ripe.net> In order to register for a DNSSec Training Course you must be an employee of an LIR and either : - be an LIR contact - be confirmed by an LIR contact. LIR contacts are those employees of an LIR who are registered with the RIPE NCC as authoritative contact persons. It is expected that most of those interested in the DNSSec Training Course will not be an authorative contact persons for their LIR, and therefore will be refused by the course registration "robot". In order to be admitted to the course, a confirmation e-mail must be sent to <training(a)ripe.net>. Please approach the LIR contacts from your organisation personally, since the identity of LIR contacts is confidential, and the RIPE NCC is unable to divulge contact persons for any given LIR. Kind Regards, The RIPE NCC Training Team COURSE DATES AND VENUES ======================== Date: Thursday 27 March 2003 Time: 0900 - 1700 Location: Amsterdam,The Netherlands AND: Date: Saturday 17 May 2003 Time: 0900 - 1700 Location: Barcelona, Spain AND: Date: Tuesday 3 June 2003 Time: 0900 - 1700 Location: Stockholm, Sweden REGISTRATION FORM ================= %START PART 1 - Registration 1) Your name Enter First name, Last name in full e.g. John Doe Mary-Beth Walton # NAME [ ] 2) Your Registry ID (format: country-code.<name of registry>) # REG [ ] 3) Your e-mail address # EMAIL [ ] 4) Your NIC handle (optional) # NICHANDLE [ ] 5) The course you plan to attend (date and location) # COURSE [ ] %END

1 0