From training at ripe.net Mon Nov 12 17:37:47 2007 From: training at ripe.net (RIPE NCC Training Services) Date: Mon, 12 Nov 2007 17:37:47 +0100 Subject: [dns-wg] Announcement DNS for LIRs Training Courses Message-ID: <20071112163747.0ADC02F583@herring.ripe.net> [Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC Training Services Department invites you to register for one of our upcoming DNS for LIRs Training Courses: Date: Tuesday 29 January 2008 Time: 09:00-17:00 Location: London, United Kingdom And Date: Wednesday 20 February 2008 Time: 09:00-17:00 Location: Vienna, Austria Hosted by: Nic.at: http://www.nic.at/ The main objective of the DNS for LIRs Training Course is to provide LIRs with information about the different DNS related services the RIPE NCC has available for them. It covers reverse DNS procedures and checks, as well as giving information about DNS Monitoring (DNSMON), K-Root and anycasting. The course also covers DNSSEC and the specific procedures set up by the RIPE NCC to secure the in-addr.arpa zones. Please note that the DNS for LIRs course focuses on DNS services and procedures related to being an LIR. The course does: - NOT teach the basics of DNS - NOT describe how to receive Internet resources from the RIPE NCC - NOT describe fully how to operate a Local Internet Registry (LIR) The course is intended for technical staff of LIRs. It is assumed that all attendees are familiar with common DNS terminology and have a practical knowledge of operating DNS servers. The course is free of charge. We provide lunch and printed training materials. We do not cover any of your travel expenses or accommodation. We give all of our training courses in English. You can find more information about the course at: http://www.ripe.net/training/dns REGISTRATION: ============ To register for this course, please use the LIR Portal or complete the registration via our website on: http://www.ripe.net/cgi-bin/trainingform.pl.cgi If you have any questions please do not hesitate to contact us at . Kind regards, Rumy Kanis Training Services Manager RIPE NCC From pawal at blipp.com Tue Nov 13 11:27:31 2007 From: pawal at blipp.com (Patrik Wallstrom) Date: Tue, 13 Nov 2007 11:27:31 +0100 Subject: [dns-wg] DNS test protocol Message-ID: <20071113102731.GA19204@vic20.blipp.com> Hi, .SE is currently performing DNS tests of consumer broadband routers as we have had problems with DNSSEC and these types of products (EDNS0 and so on). We have been running a number of tests using the attached test specification. However, we would like to broaden the scope of our tests to include non-DNSSEC specific tests such as unknown RR types. If there are more specific tests regarding ENUM or IPv6 we could do please propose them to me. We assume that AAAA works, but could include that as well. We have also decided to test if the router is an open resolver on the external interface. Please read the test protocol and give me your comments, thanks. Patrik Wallstr?m Project Manager, R&D .SE (Stiftelsen f?r Internetinfrastruktur) E-mail: patrik.wallstrom at iis.se Web: http://www.iis.se/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: Digital signature URL: From pawal at blipp.com Tue Nov 13 11:52:14 2007 From: pawal at blipp.com (Patrik Wallstrom) Date: Tue, 13 Nov 2007 11:52:14 +0100 Subject: [dns-wg] Re: [DNSOP] DNS test protocol In-Reply-To: <20071113102731.GA19204@vic20.blipp.com> References: <20071113102731.GA19204@vic20.blipp.com> Message-ID: <20071113105214.GD19204@vic20.blipp.com> Sorry, the attachment was missing. -- Patrik Wallstr?m Project Manager, R&D .SE (Stiftelsen f?r Internetinfrastruktur) E-mail: patrik.wallstrom at iis.se Web: http://www.iis.se/ -------------- next part -------------- DNS test protocol for SOHO-routers ************************************************************ *** Is the router EDNS0 capable ************************************************************ *** Does the router give the client ENDS0 traffic A.1.1: dig +retry=0 +bufsize=512 +qr small.nxdomain.se TXT A.1.2: dig +retry=0 +bufsize=512 +qr medium.nxdomain.se TXT A.1.3: dig +retry=0 +bufsize=512 +qr large.nxdomain.se TXT A.1.4: dig +retry=0 +bufsize=512 +qr huge.nxdomain.se TXT A.2.1: dig +retry=0 +bufsize=1024 +qr small.nxdomain.se TXT A.2.2: dig +retry=0 +bufsize=1024 +qr medium.nxdomain.se TXT A.2.3: dig +retry=0 +bufsize=1024 +qr large.nxdomain.se TXT A.2.4: dig +retry=0 +bufsize=1024 +qr huge.nxdomain.se TXT A.3.1: dig +retry=0 +bufsize=4096 +qr small.nxdomain.se TXT A.3.2: dig +retry=0 +bufsize=4096 +qr medium.nxdomain.se TXT A.3.3: dig +retry=0 +bufsize=4096 +qr large.nxdomain.se TXT A.3.4: dig +retry=0 +bufsize=4096 +qr huge.nxdomain.se TXT A.4.1: dig +retry=0 +bufsize=8192 +qr small.nxdomain.se TXT A.4.2: dig +retry=0 +bufsize=8192 +qr medium.nxdomain.se TXT A.4.3: dig +retry=0 +bufsize=8192 +qr large.nxdomain.se TXT A.4.4: dig +retry=0 +bufsize=8192 +qr huge.nxdomain.se TXT ************************************************************ **** AD=1 in the reply ************************************************************ *** Does the router accept replies with AD=1 B.1: dig +retry=0 @validator-with-BIND_9.4.1 +qr dnssec.se SOA *** Does the router accept replies with AD=0 B.2: dig +retry=0 @validator-with-BIND_9.4.2 +qr dnssec.se SOA ************************************************************ **** DO=1 in query ************************************************************ *** Does the router accept queries with DO=1, replies with AD=1 C.1: dig +retry=0 @validator-with-BIND_9.4.2 +qr +dnssec dnssec.se SOA *** Does the router accept queries with DO=1, replies with AD=0 C.2: dig +retry=0 @validator-with-BIND_9.4.2 +qr +dnssec iis.se SOA ************************************************************ **** DO=1, CD=1 in query ************************************************************ *** Does the router accept queries with DO=1, CD=1 D.1: dig +retry=0 @validator-with-BIND_9.4.2 +qr +dnssec +cdflag dnssec.se SOA *** Does the router accept queries with DO=1, CD=1 D.2: dig +retry=0 @validator-with-BIND_9.4.2 +qr +dnssec +cdflag iis.se SOA ************************************************************ **** AD=1 in query ************************************************************ *** Does the router accept queries with AD=1, replies with AD=1 E.1: dig +retry=0 @validator-with-BIND_9.4.1 +qr +adflag dnssec.se SOA *** Does the router accept queries with AD=1, replies with AD=0 E.2: dig +retry=0 @validator-with-BIND_9.4.2 +qr +adflag dnssec.se SOA ************************************************************ **** Open resolver in the router? (test from the "outside") ************************************************************ F.1: dig +retry=0 @router nonexisting.dnssec.se TXT -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: Digital signature URL: From bmanning at vacation.karoshi.com Tue Nov 13 11:53:51 2007 From: bmanning at vacation.karoshi.com (bmanning at vacation.karoshi.com) Date: Tue, 13 Nov 2007 10:53:51 +0000 Subject: [dns-wg] DNS test protocol In-Reply-To: <20071113102731.GA19204@vic20.blipp.com> References: <20071113102731.GA19204@vic20.blipp.com> Message-ID: <20071113105350.GA23065@vacation.karoshi.com.> I presume you have been using the tahi testsuite and are wanting something -different-? http://www.tahi.org/dns/ --bill On Tue, Nov 13, 2007 at 11:27:31AM +0100, Patrik Wallstrom wrote: > Hi, > > .SE is currently performing DNS tests of consumer broadband routers as > we have had problems with DNSSEC and these types of products (EDNS0 > and so on). We have been running a number of tests using the attached > test specification. However, we would like to broaden the scope of our > tests to include non-DNSSEC specific tests such as unknown RR types. > If there are more specific tests regarding ENUM or IPv6 we could do > please propose them to me. We assume that AAAA works, but could > include that as well. We have also decided to test if the router is an > open resolver on the external interface. > > Please read the test protocol and give me your comments, thanks. > > Patrik Wallstr?m > Project Manager, R&D > .SE (Stiftelsen f?r Internetinfrastruktur) > E-mail: patrik.wallstrom at iis.se > Web: http://www.iis.se/ From kinsella at itcarlow.ie Tue Nov 13 12:36:24 2007 From: kinsella at itcarlow.ie (Austin Kinsella) Date: Tue, 13 Nov 2007 11:36:24 +0000 Subject: [dns-wg] (off topic) DNS test protocol In-Reply-To: <20071113105350.GA23065@vacation.karoshi.com.> References: <20071113102731.GA19204@vic20.blipp.com> <20071113105350.GA23065@vacation.karoshi.com.> Message-ID: <04C8955B-EEE1-49C6-ADE5-35036E61147D@itcarlow.ie> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I use Mac OS X 10.4.9. From time to time I receive an email which causes Mail to hang when I try to open it. 9 times out of 10 the email comes from the dns-wg list. This one from bmanning is the latest culprit. Any chance we could identify and cure the problem? Thanks. AK At 10:53 on 13 Nov 2007 bmanning at vacation.karoshi.com wrote: > I presume you have been using the tahi testsuite and are wanting > something -different-? > > http://www.tahi.org/dns/ > > --bill > > > On Tue, Nov 13, 2007 at 11:27:31AM +0100, Patrik Wallstrom wrote: >> Hi, >> >> .SE is currently performing DNS tests of consumer broadband >> routers as >> we have had problems with DNSSEC and these types of products (EDNS0 >> and so on). We have been running a number of tests using the attached >> test specification. However, we would like to broaden the scope of >> our >> tests to include non-DNSSEC specific tests such as unknown RR types. >> If there are more specific tests regarding ENUM or IPv6 we could do >> please propose them to me. We assume that AAAA works, but could >> include that as well. We have also decided to test if the router >> is an >> open resolver on the external interface. >> >> Please read the test protocol and give me your comments, thanks. >> >> Patrik Wallstr?m >> Project Manager, R&D >> .SE (Stiftelsen f?r Internetinfrastruktur) >> E-mail: patrik.wallstrom at iis.se >> Web: http://www.iis.se/ > > __ Austin Kinsella, Lecturer, Networks & Programming, Institute of Technology, Carlow, Ireland. +353 59 9170417 pgp public key is at http://w3.itcarlow.ie/pgpkey.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) iD8DBQFHOYw5Yoy2ek64z4cRAjNrAJ0RRyv6tZWmoaqx+/bapsRxR4F6zQCfeFUu higeSkgCROFHU4/kxufwO+E= =7U5o -----END PGP SIGNATURE----- From kinsella at itcarlow.ie Tue Nov 13 12:41:12 2007 From: kinsella at itcarlow.ie (Austin Kinsella) Date: Tue, 13 Nov 2007 11:41:12 +0000 Subject: [dns-wg] (off topic) DNS test protocol In-Reply-To: <20071113105350.GA23065@vacation.karoshi.com.> References: <20071113102731.GA19204@vic20.blipp.com> <20071113105350.GA23065@vacation.karoshi.com.> Message-ID: <25E47D8A-B146-4C4B-8BCE-DF9A7B5910CB@itcarlow.ie> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ooops, sorry, it was the Patrick Wallstrom message that caused the problem. AK - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I use Mac OS X 10.4.9. From time to time I receive an email which causes Mail to hang when I try to open it. 9 times out of 10 the email comes from the dns-wg list. This one from bmanning is the latest culprit. Any chance we could identify and cure the problem? Thanks. AK At 10:53 on 13 Nov 2007 bmanning at vacation.karoshi.com wrote: > I presume you have been using the tahi testsuite and are wanting > something -different-? > > http://www.tahi.org/dns/ > > --bill > > > On Tue, Nov 13, 2007 at 11:27:31AM +0100, Patrik Wallstrom wrote: >> Hi, >> >> .SE is currently performing DNS tests of consumer broadband >> routers as >> we have had problems with DNSSEC and these types of products (EDNS0 >> and so on). We have been running a number of tests using the attached >> test specification. However, we would like to broaden the scope of >> our >> tests to include non-DNSSEC specific tests such as unknown RR types. >> If there are more specific tests regarding ENUM or IPv6 we could do >> please propose them to me. We assume that AAAA works, but could >> include that as well. We have also decided to test if the router >> is an >> open resolver on the external interface. >> >> Please read the test protocol and give me your comments, thanks. >> >> Patrik Wallstr?m >> Project Manager, R&D >> .SE (Stiftelsen f?r Internetinfrastruktur) >> E-mail: patrik.wallstrom at iis.se >> Web: http://www.iis.se/ > > __ Austin Kinsella, Lecturer, Networks & Programming, Institute of Technology, Carlow, Ireland. +353 59 9170417 pgp public key is at http://w3.itcarlow.ie/pgpkey.html - -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) iD8DBQFHOYw5Yoy2ek64z4cRAjNrAJ0RRyv6tZWmoaqx+/bapsRxR4F6zQCfeFUu higeSkgCROFHU4/kxufwO+E= =7U5o - -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) iD8DBQFHOY1YYoy2ek64z4cRAtfnAKCrqqmWcEU4XQeY8Qze6SF2QN4QGACdFfc8 IIWhunFm21e6NXJz1MY2kNQ= =i+P6 -----END PGP SIGNATURE----- From jaap at NLnetLabs.nl Tue Nov 13 13:46:13 2007 From: jaap at NLnetLabs.nl (Jaap Akkerhuis) Date: Tue, 13 Nov 2007 13:46:13 +0100 Subject: [dns-wg] (off topic) DNS test protocol In-Reply-To: Your message of Tue, 13 Nov 2007 11:41:12 +0000. <25E47D8A-B146-4C4B-8BCE-DF9A7B5910CB@itcarlow.ie> Message-ID: <200711131246.lADCkDOb084830@bartok.nlnetlabs.nl> Ooops, sorry, it was the Patrick Wallstrom message that caused the =20 problem. I use Mac OS X 10.4.9. =46rom time to time I receive an email which =20 causes Mail to hang when I try to open it. 9 times out of 10 the =20 email comes from the dns-wg list. This one from bmanning is the =20 latest culprit. Any chance we could identify and cure the problem? I wouldn't be suprised if you have PGP-mail with automatic verification switched on and gpg configured for automatic key fetching. And because Patrick Wallstrom hadn't been posting to this list before, gog went of to fetch the public key and that takes some time. jaap From kinsella at itcarlow.ie Tue Nov 13 15:40:50 2007 From: kinsella at itcarlow.ie (Austin Kinsella) Date: Tue, 13 Nov 2007 14:40:50 +0000 Subject: [dns-wg] (off topic) DNS test protocol In-Reply-To: <20071113120435.GG19204@vic20.blipp.com> References: <20071113102731.GA19204@vic20.blipp.com> <20071113105350.GA23065@vacation.karoshi.com.> <25E47D8A-B146-4C4B-8BCE-DF9A7B5910CB@itcarlow.ie> <20071113120435.GG19204@vic20.blipp.com> Message-ID: <26077140-2690-4BB0-879C-63936E6EF34E@itcarlow.ie> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Both this message and the following one repeated the problem, but enabled me to identify it. It is related to the PGP signature, and seems to be occurring when Mail attempts an auto-verification. The hang does not occur if I open the message with no network connection. I will fire up ethereal and see if I can spot what is happening. Thanks for your help. AK At 12:04 on 13 Nov 2007 Patrik Wallstrom wrote: > I signed the message with PGP/MIME, I can send you a test message and > see if we could repeat the problem. > > -- > patrik_wallstrom->foodfight->pawal at blipp.com->+46-733173956 __ Austin Kinsella, Lecturer, Networks & Programming, Institute of Technology, Carlow, Ireland. +353 59 9170417 pgp public key is at http://w3.itcarlow.ie/pgpkey.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) iD8DBQFHObdyYoy2ek64z4cRAvolAKCq8iorc6bY/dnMdgvbQ5eI5eLw0gCgoSYN RS3h3hGYAKqZssDbmvpegQM= =8kqR -----END PGP SIGNATURE----- From dougb at dougbarton.us Tue Nov 13 22:09:50 2007 From: dougb at dougbarton.us (Doug Barton) Date: Tue, 13 Nov 2007 13:09:50 -0800 (PST) Subject: [dns-wg] (off topic) DNS test protocol In-Reply-To: <26077140-2690-4BB0-879C-63936E6EF34E@itcarlow.ie> References: <20071113102731.GA19204@vic20.blipp.com> <20071113105350.GA23065@vacation.karoshi.com.> <25E47D8A-B146-4C4B-8BCE-DF9A7B5910CB@itcarlow.ie> <20071113120435.GG19204@vic20.blipp.com> <26077140-2690-4BB0-879C-63936E6EF34E@itcarlow.ie> Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 On Tue, 13 Nov 2007, Austin Kinsella wrote: Speaking of key problems: > --------------------------------------------------------------------------- > /usr/local/libexec/ppf_verify: pgp command failed > > gpg: Signature made Tue Nov 13 06:40:50 2007 PST using DSA key ID 4EB8CF87 > gpg: requesting key 4EB8CF87 from hkp server pool.sks-keyservers.net > gpg: no valid OpenPGP data found. > gpg: Total number processed: 0 > gpg: Can't check signature: public key not found > --------------------------------------------------------------------------- I also checked several other popular servers, no luck. You might want to consider uploading your public key. > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Both this message and the following one repeated the problem, but enabled me > to identify it. It is related to the PGP signature, and seems to be occurring > when Mail attempts an auto-verification. The hang does not occur if I open > the message with no network connection. I will fire up ethereal and see if I > can spot what is happening. It's possible that it is hanging up on trying to retrieve Patrik's key, although I was able to retrieve his just fine. It's also possible that because Patrik uses a MIME signature, and Apple Mail's implementation of MIME signatures doesn't follow RFC 3156 that it is having problems processing it. hth, Doug -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQFHOhKeyIakK9Wy8PsRA48GAJ97o1f8DPgrO2G7kYi74fhoB8pyLACeL/Kt t/YXLijeKKWlMClO5DX+0OE= =k0+w -----END PGP SIGNATURE----- From kinsella at itcarlow.ie Wed Nov 14 00:10:57 2007 From: kinsella at itcarlow.ie (Austin Kinsella) Date: Tue, 13 Nov 2007 23:10:57 +0000 Subject: [dns-wg] (off topic) DNS test protocol In-Reply-To: References: <20071113102731.GA19204@vic20.blipp.com> <20071113105350.GA23065@vacation.karoshi.com.> <25E47D8A-B146-4C4B-8BCE-DF9A7B5910CB@itcarlow.ie> <20071113120435.GG19204@vic20.blipp.com> <26077140-2690-4BB0-879C-63936E6EF34E@itcarlow.ie> Message-ID: <1C5CBA8F-9DDD-4BC1-B08A-349D21F6BD19@itcarlow.ie> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Doug's signature verified correctly, as does Patrik's - it seems SOMEONE tidied up our college firewall, didn't recognise the keyserver ports, and so decided to block them. Reopening them has solved the problem. I had thought I had uploaded my key, but it was a long time ago, and maybe I only thought it ... Thanks, guys. AK At 21:09 on 13 Nov 2007 Doug Barton wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: RIPEMD160 > > > On Tue, 13 Nov 2007, Austin Kinsella wrote: > > Speaking of key problems: > >> --------------------------------------------------------------------- >> ------ >> /usr/local/libexec/ppf_verify: pgp command failed >> >> gpg: Signature made Tue Nov 13 06:40:50 2007 PST using DSA key ID >> 4EB8CF87 >> gpg: requesting key 4EB8CF87 from hkp server pool.sks-keyservers.net >> gpg: no valid OpenPGP data found. >> gpg: Total number processed: 0 >> gpg: Can't check signature: public key not found >> --------------------------------------------------------------------- >> ------ > > I also checked several other popular servers, no luck. You might > want to consider uploading your public key. > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> >> Both this message and the following one repeated the problem, but >> enabled me to identify it. It is related to the PGP signature, and >> seems to be occurring when Mail attempts an auto-verification. The >> hang does not occur if I open the message with no network >> connection. I will fire up ethereal and see if I can spot what is >> happening. > > It's possible that it is hanging up on trying to retrieve Patrik's > key, although I was able to retrieve his just fine. It's also > possible that because Patrik uses a MIME signature, and Apple > Mail's implementation of MIME signatures doesn't follow RFC 3156 > that it is having problems processing it. > > > hth, > > Doug > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (FreeBSD) > > iD8DBQFHOhKeyIakK9Wy8PsRA48GAJ97o1f8DPgrO2G7kYi74fhoB8pyLACeL/Kt > t/YXLijeKKWlMClO5DX+0OE= > =k0+w > -----END PGP SIGNATURE----- __ Austin Kinsella, Lecturer, Networks & Programming, Institute of Technology, Carlow, Ireland. +353 59 9170417 pgp public key is at http://w3.itcarlow.ie/pgpkey.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) iD8DBQFHOi8BYoy2ek64z4cRAs4YAKCkIaiEYKomqh7fD3UI6ef3jv7oAgCeITq7 MxE6cm3RUVVdGZW/OjheExA= =d+Wj -----END PGP SIGNATURE----- From paf at cisco.com Wed Nov 14 02:30:18 2007 From: paf at cisco.com (=?ISO-8859-1?Q?Patrik_F=E4ltstr=F6m?=) Date: Tue, 13 Nov 2007 23:30:18 -0200 Subject: [dns-wg] (off topic) DNS test protocol In-Reply-To: <26077140-2690-4BB0-879C-63936E6EF34E@itcarlow.ie> References: <20071113102731.GA19204@vic20.blipp.com> <20071113105350.GA23065@vacation.karoshi.com.> <25E47D8A-B146-4C4B-8BCE-DF9A7B5910CB@itcarlow.ie> <20071113120435.GG19204@vic20.blipp.com> <26077140-2690-4BB0-879C-63936E6EF34E@itcarlow.ie> Message-ID: <1BCDEE70-C410-4F0B-9432-6E16CEBF6EC4@cisco.com> If you use GPGMail it is a known issue/bug with that software and how it integrates with Mail.App. Automatic verification should *not* be turned on -- as a general recommendation. It also screws up the way IMAP flags are managed. Patrik On 13 nov 2007, at 12.40, Austin Kinsella wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Both this message and the following one repeated the problem, but > enabled me to identify it. It is related to the PGP signature, and > seems to be occurring when Mail attempts an auto-verification. The > hang does not occur if I open the message with no network > connection. I will fire up ethereal and see if I can spot what is > happening. > > Thanks for your help. > > AK > At 12:04 on 13 Nov 2007 Patrik Wallstrom wrote: >> I signed the message with PGP/MIME, I can send you a test message and >> see if we could repeat the problem. >> >> -- >> patrik_wallstrom->foodfight->pawal at blipp.com->+46-733173956 > > > __ > Austin Kinsella, > Lecturer, Networks & Programming, > Institute of Technology, Carlow, Ireland. > +353 59 9170417 > pgp public key is at http://w3.itcarlow.ie/pgpkey.html > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.1 (Darwin) > > iD8DBQFHObdyYoy2ek64z4cRAvolAKCq8iorc6bY/dnMdgvbQ5eI5eLw0gCgoSYN > RS3h3hGYAKqZssDbmvpegQM= > =8kqR > -----END PGP SIGNATURE----- From anandb at ripe.net Tue Nov 20 17:02:48 2007 From: anandb at ripe.net (Anand Buddhdev) Date: Tue, 20 Nov 2007 17:02:48 +0100 Subject: [dns-wg] Deployment of DNSSEC in the e164.arpa zone Message-ID: <200711201702.48887.anandb@ripe.net> Dear Colleagues, As previously announced, the RIPE NCC will sign the e164.arpa (ENUM) zone on 26 November 2007. Details of the key maintenance procedure are available at: http://www.ripe.net/rs/enum/key-maint.html The Key Signing Key (KSK) will be published on 26 November 2007 at the following secure URL: https://www.ripe.net/projects/disi/keys/ If you have any questions, please send an e-mail to . -- Anand Buddhdev, DNS Services Manager, RIPE NCC From anandb at ripe.net Mon Nov 26 16:42:16 2007 From: anandb at ripe.net (Anand Buddhdev) Date: Mon, 26 Nov 2007 16:42:16 +0100 Subject: [dns-wg] DNSSEC deployed in the e164.arpa (ENUM) zone Message-ID: <200711261642.16897.anandb@ripe.net> Dear Colleagues, Earlier today, the RIPE NCC signed the e164.arpa (ENUM) zone. The Key-Signing Keys (KSKs) for all zones signed by the RIPE NCC, including the e164.arpa zone, are available at the following secure URL: https://www.ripe.net/projects/disi/keys/ripe-ncc-dnssec-keys-new.txt Details of the key maintenance procedure are available at: http://www.ripe.net/rs/enum/key-maint.html If you have any questions, please send an e-mail to . Regards, Anand Buddhev DNS Services Manager, RIPE NCC