RIPE-39

Minutes - DISI BOF

Chair: Henk Uijterwaal (HU) RIPE NCC
 
Slides are at:
http://www.ripe.net/projects/disi/Talks/0105_DISI
 
HU welcomes everyone.
 
Agenda:
 
      1- What is this BoF about?
 
      2- Administrative matters

      3. DISI
   
      4. CSIRS

      5. Discussision
   
      6. The future
  
      7.  AOB
   
   
        ----
   
3. DISI presentation: Olaf Kolkman - RIPE NCC
   
"DISI & DNSSEC on the reverse tree"
 
slides are at:
http://www.ripe.net/projects/disi/Talks/0105_DISI

Questions:
 
Q: Why don't you use IPv6?

A: Because we want to gain experience first.

Q: What about the 192.168.?

A: -XXX-

Q: What can an end user do to make his ISP secure their zone?

A: We want to convince the ISP's to deploy this.
 
Q: What kind of public key system used?

A: RSA is recommended, in theory all protocol can be used in parallel. But
   to get real success we have to choose one. That probably will be RSA.

Q: How easily can we go to another encryption protocol, if for example one
encryption scheme gets cracked.
  

A: Depending on how long signatures are valid, a change of the protocol
   can be done within 1 day. But this depends on a lot of parameters.

Q: Is there enough experience yet to determine how much effort it is to do
   actual implementation of this.

A: Takes more CPU power for signing. Packet sizes grow.
 
                        ----

4. Presentation: Yuri Demchenko - Terena

"CSIRS coordination for Europe and extended incident handling standardization"

Slides are at:
http://www.ripe.net/projects/disi/Talks/0105_DISI_YD
  
No questions.
 
                      ------
 
6. The future
  
HU asks how to go ahead with this, whether to create a new working group,
join an existing working group etc.
 
There are more issues related to security DoS, IPv6, Spam.
 
Q: [chair of Anti-Spam WG] Is a merge going on between the various 
   security-related WG's?

A1: Not that we are aware off.

A2: We want to keep them seperate.
 
HU asks for a chair. 
No response. 
  
He will setup a mailing list.
 
                     -----
 
8. AOB 
 
OK offers to give an experimental presentation about DNNSEC.
This presentation is still under development and will be given in the
future.
 
The attendees welcome that and OK gives his presentation.
 
                     -----

HU thanks all the attendees and closes the session.