Re: [dns-operations] TLD .ci DNSSEC-down
Hello, During last CENTR joint Tech and R workgroups meeting, we had a group session about defining "DNSSEC validation best practices". We outlined some key principles and identified some strengths and weaknesses (especially concerning time-based/historical validation) in our current operations. One objective could be to come out with guidelines and corresponding tool set (existing or developed) to implement those practices. I am not speaking for other CENTR members but if the outcome of those reflections is valuable, it might be a good idea to get insight from and share it with the broader DNS community. Regards, On 2023-10-23 15:21, Landry KOUADIO wrote: Bonjour à tous Just reassure you that steps have been taken to resolve the problem noted on the .CI In fact, we noticed a DNS service stoppage on our Signer DNSSEC server. From this observation, we quickly carried out service resumption activities and are currently analyzing all the elements to understand the cause. I would like to thank you for the alerts and also a big thank you to everyone who assisted us with their proposals and recommendations during the management of this incident. I would like to take advantage of this email to reflect on a DNSSEC repository integrating a common knowledge base for all DNS players. we could thus enrich ourselves and contribute effectively to the management of DNS incidents and prevent ourselves from any DNS threats or vulnerabilities Sincerely logoN.png *Landry KOUADIO* *Chef de Centre POINT CI* Tél. :27 20 34 42 53 Email :kouadio.lan...@artci.ci Site web :https://www.artci.ci/ <https://www.artci.ci/> <https://www.facebook.com/artcipageofficielle?_rdc=1&_rdr> <https://twitter.com/artcitic> <https://www.youtube.com/channel/UCDiVco1S4ljRNjpoRN0U5wQ> <https://ci.linkedin.com/in/autorit%C3%A9-de-r%C3%A9gulation-des-tic-artci-112670240> *De :* Cedrick Adrien Mbeyet *Envoyé :* lundi 23 octobre 2023 12:52 *À :* dns-operations@lists.dns-oarc.net *Cc :* Landry KOUADIO *Objet :* Re: [dns-operations] TLD .ci DNSSEC-down Yes, also notice the same. I have CC one the people responsible for the .ci in case their is a takeaway for us. Best regards, -- Guillaume-Jean Herbiet, PhD .lu Technical Manager Fondation Restena 2, avenue de l'Université L-4365 Esch-sur-Alzette T +352 42 44 09 1 F +352 42 24 73 restena.lu | dns.lu | my.lu PGP 0x3A4C47C7 This email may contain information for limited distribution only, please treat accordingly. *** I am out-of-office on Wednesdays *** OpenPGP_signature.asc Description: OpenPGP digital signature ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
Re: [dns-operations] TLD .ci DNSSEC-down
Bonjour à tous Just reassure you that steps have been taken to resolve the problem noted on the .CI In fact, we noticed a DNS service stoppage on our Signer DNSSEC server. >From this observation, we quickly carried out service resumption activities >and are currently analyzing all the elements to understand the cause. I would like to thank you for the alerts and also a big thank you to everyone who assisted us with their proposals and recommendations during the management of this incident. I would like to take advantage of this email to reflect on a DNSSEC repository integrating a common knowledge base for all DNS players. we could thus enrich ourselves and contribute effectively to the management of DNS incidents and prevent ourselves from any DNS threats or vulnerabilities Sincerely [cid:logon_9e2aceaf-a243-4a51-b3d5-5926c0f99361.png]Landry KOUADIO Chef de Centre POINT CI Tél. :27 20 34 42 53 Email :kouadio.lan...@artci.ci Site web : https://www.artci.ci/ [cid:c6d5219c-b9d4-4e33-b448-328c6966a6f1.jpg] [cid:facebook_c58f692c-2696-43be-b283-ab304cb44b9b.png] <https://www.facebook.com/artcipageofficielle?_rdc=1&_rdr> [cid:twitter_326a1d4c-1d84-46a4-942d-41406be872db.png] <https://twitter.com/artcitic> [cid:youtube_83bea96e-7e58-4955-a183-2b706294c728.png] <https://www.youtube.com/channel/UCDiVco1S4ljRNjpoRN0U5wQ> [cid:linkedin_c1c15fae-6836-4287-b8e7-03ccbfb3b2f4.png] <https://ci.linkedin.com/in/autorit%C3%A9-de-r%C3%A9gulation-des-tic-artci-112670240> [cid:banniere_artci2_9a69fff0-ba7d-4b53-abb1-4ef5f3c97961.png] De : Cedrick Adrien Mbeyet Envoyé : lundi 23 octobre 2023 12:52 À : dns-operations@lists.dns-oarc.net Cc : Landry KOUADIO Objet : Re: [dns-operations] TLD .ci DNSSEC-down Yes, also notice the same. I have CC one the people responsible for the .ci in case their is a takeaway for us. Best regards, -- ___ Cedrick Adrien Mbeyet On 23/10/2023 15:50, Stephane Bortzmeyer wrote: > On Mon, Oct 23, 2023 at 10:26:46AM +0200, > Stephane Bortzmeyer wrote > a message of 4 lines which said: > >> .ci has a DS in the root but apparently no longer signs. >> >> https://zonemaster.net/en/result/9d87233d252a8b60 >> https://dnsviz.net/d/ci/ZTYEMQ/dnssec/ > Now working again: > > https://zonemaster.fr/fr/result/c57c27c1031b5e2c > https://dnsviz.net/d/ci/ZTZc9g/dnssec/ > ___ > dns-operations mailing list > dns-operations@lists.dns-oarc.net > https://lists.dns-oarc.net/mailman/listinfo/dns-operations ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
Re: [dns-operations] TLD .ci DNSSEC-down
Yes, also notice the same. I have CC one the people responsible for the .ci in case their is a takeaway for us. Best regards, -- ___ Cedrick Adrien Mbeyet On 23/10/2023 15:50, Stephane Bortzmeyer wrote: On Mon, Oct 23, 2023 at 10:26:46AM +0200, Stephane Bortzmeyer wrote a message of 4 lines which said: .ci has a DS in the root but apparently no longer signs. https://zonemaster.net/en/result/9d87233d252a8b60 https://dnsviz.net/d/ci/ZTYEMQ/dnssec/ Now working again: https://zonemaster.fr/fr/result/c57c27c1031b5e2c https://dnsviz.net/d/ci/ZTZc9g/dnssec/ ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
Re: [dns-operations] TLD .ci DNSSEC-down
On Mon, Oct 23, 2023 at 10:26:46AM +0200, Stephane Bortzmeyer wrote a message of 4 lines which said: > .ci has a DS in the root but apparently no longer signs. > > https://zonemaster.net/en/result/9d87233d252a8b60 > https://dnsviz.net/d/ci/ZTYEMQ/dnssec/ Now working again: https://zonemaster.fr/fr/result/c57c27c1031b5e2c https://dnsviz.net/d/ci/ZTZc9g/dnssec/ ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
[dns-operations] TLD .ci DNSSEC-down
.ci has a DS in the root but apparently no longer signs. https://zonemaster.net/en/result/9d87233d252a8b60 https://dnsviz.net/d/ci/ZTYEMQ/dnssec/ ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations
