Re: [DNSOP] Working Group Last Call for: Message Digest for DNS Zones

2020-01-13 Thread Miek Gieben
[ Quoting in "Re: [DNSOP] Working Group Last Call" ] I'm not convinced of the general utility of this scheme.  It feels like DNS bloat and more a solution in search of a problem.   That said, I appreciate  Duane's willingness to make changes to fix some of the more egregious problems. I

[DNSOP] An extended scenario for ZONEMD

2020-01-13 Thread John R Levine
If the root zone hand a ZONEMD in it, for the first time I'd have a way to validate the IP addresses in the *.root-servers.net glue records. Someone suggested you could validate them by trying a query and seeing if you get a answer, which is of course wrong. That tells you you've found a

[DNSOP] Announcing the ICANN DNS Symposium 2020 and solicitation of presentation proposals

2020-01-13 Thread Matt Larson
[cid:6660E365-46E0-4720-8817-48FAE0A17A20] Dear colleagues, ICANN’s Office of the CTO is pleased to announce that the fourth ICANN DNS Symposium (IDS 2020) will be held 7-8 May 2020 in Paris, France. IDS 2020 is co-locating with the sixth GDD Industry Summit (3-6 May 2020), the Registration

Re: [DNSOP] Working Group Last Call for: Message Digest for DNS Zones

2020-01-13 Thread John R Levine
Thought I'd forgotten about this?  :-) No such luck, but I'm done. I don't see any benefit in further argument. On 1/8/2020 3:13 PM, John R Levine wrote: On Wed, 8 Jan 2020, Michael StJohns wrote: I'm running a private copy of the root zone for my organization. I (automated) check the SOA

Re: [DNSOP] Working Group Last Call for: Message Digest for DNS Zones

2020-01-13 Thread Michael StJohns
Thought I'd forgotten about this?  :-) On 1/8/2020 3:13 PM, John R Levine wrote: On Wed, 8 Jan 2020, Michael StJohns wrote: I'm running a private copy of the root zone for my organization. I (automated) check the SOA every so often, and arrange for a download of the zone when it changes.    I

Re: [DNSOP] future-proofing (Re: Working Group Last Call for: Message Digest for DNS Zones)

2020-01-13 Thread Wessels, Duane
> On Jan 8, 2020, at 3:55 PM, Michael StJohns wrote: Mike, Thank you for these suggestions. The authors have discussed them. > If the above is what you intended, then sections 3 and 4 should be labeled > "Calculating/Verifying the DIGEST for the SIMPLE scheme", and there should be >

Re: [DNSOP] Last Call: (A Common Operational Problem in DNS Servers - Failure To Communicate.) to Best Current Practice

2020-01-13 Thread Warren Kumari
On Mon, Jan 13, 2020 at 10:28 AM Ray Bellis wrote: > > On 13/01/2020 14:48, Warren Kumari wrote: > > On Thu, Dec 19, 2019 at 8:28 PM Warren Kumari wrote: > >> > >> [ Note: CC list edited ] > >> > >> Hi there authors, > > > > Any idea when you might get a chance to get to address these comments?

Re: [DNSOP] Last Call: (A Common Operational Problem in DNS Servers - Failure To Communicate.) to Best Current Practice

2020-01-13 Thread Ray Bellis
On 13/01/2020 14:48, Warren Kumari wrote: > On Thu, Dec 19, 2019 at 8:28 PM Warren Kumari wrote: >> >> [ Note: CC list edited ] >> >> Hi there authors, > > Any idea when you might get a chance to get to address these comments? > This is a useful document, and I'd like to see it progress. Mark

Re: [DNSOP] Last Call: (A Common Operational Problem in DNS Servers - Failure To Communicate.) to Best Current Practice

2020-01-13 Thread Warren Kumari
On Thu, Dec 19, 2019 at 8:28 PM Warren Kumari wrote: > > [ Note: CC list edited ] > > Hi there authors, Any idea when you might get a chance to get to address these comments? This is a useful document, and I'd like to see it progress. W > > During the IETF LC Stephane supported the document (an

[DNSOP] Call for Presentations: 33rd DNS-OARC Workshop, Paris, France, May 09 - 10th 2019

2020-01-13 Thread Jan Včelák
The 33rd DNS-OARC Workshop will take place at the Marriott Rive Gauche Hotel & Conference Center in Paris, France on May 9th and 10th 2020. It is co-located with and will take place right after the ICANN GDD (May 3rd to 6th), Registrations Operations Workshop (May 6th) and ICANN DNS Symposium (May

Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-multi-provider-dnssec

2020-01-13 Thread Matthijs Mekking
Late to the party, I am sorry. I am positive about this document, and support publication. I do have one comment on the document, requesting an update. In section 4 it is said it is RECOMMENDED that providers use a common signing algorithm. I think this is too weak and it must be a MUST. The