From jim at rfc1035.com Sun Jan 10 19:54:32 2010 From: jim at rfc1035.com (Jim Reid) Date: Sun, 10 Jan 2010 18:54:32 +0000 Subject: [dns-wg] RIPE58 minutes Message-ID: <53C4DC19-CC15-467F-8F8B-BD06FC0A9289@rfc1035.com> Colleagues, a combination of miscommunication and confusion by the WG co-chairs has meant that the RIPE58 minutes went astray. Until now.... Sorry about that. I thought the minutes had been circulated just before RIPE59. They hadn't. And then assumed in Lisbon that the WG's silence about the RIPE58 minutes meant they could be approved by the WG. Which was wrong too. Oh well. Apologies are also due to the NCC staff who (a) sent your WG co-chairs the minutes before RIPE58 ended; (b) politely nagged us a few times to get the minutes out; (c) had extra hassle keeping the WG web pages up to date. Here they are. Please submit any comments or corrections to the list. -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: ripe58.txt URL: -------------- next part -------------- From sara.monteiro at fccn.pt Wed Jan 13 18:16:29 2010 From: sara.monteiro at fccn.pt (Sara Monteiro) Date: Wed, 13 Jan 2010 17:16:29 +0000 Subject: [dns-wg] DNSSEC signed version of .PT In-Reply-To: <000601ca9394$998e8ea0$ccababe0$@veiga@fccn.pt> References: <000601ca9394$998e8ea0$ccababe0$@veiga@fccn.pt> Message-ID: <4B4DFFED.9020509@fccn.pt> FYI - Apologies if you have already seen this on other lists. Sara Monteiro Pedro Veiga wrote, On 12-01-2010 14:36: > Dear colleagues, > > I'm glad to inform that we have signed the ccTLD .PT in the beginning of > 2010 and the DNSSEC signed version of .pt is in production since 4th of > January. > > For the outside world the .pt infrastructures didn't change, we still > have the same primary name server and a half a dozen of secondaries > (with dnssec-awareness), but we did add an hidden primary where the > signing it's made using an HSM to generate and store the keys. > > We are still working to improve the DNSSEC service in the administrative > side, and we hope to make it available to or Registrars/Registrants in > the next month. > > We are scheduling DNSSEC Technical Workshops to your Registrars and NREN > - National Research and Education Network since they are more proactive > and have the human resources and means to do it. We also have single > registrants with the enough DNS knowledge developing DNSSEC as well, > with the help of the documentation that we made available and also by > direct contact via email and phone. > > Further information, as .pt trust anchor it's available at: > > http://www.dnssec.pt/ > > (also available by mailing list. Send an email to info at dnssec.pt to > subscribe) > > Best Regards, > > Pedro Veiga > > From sjoerdoo at ripe.net Fri Jan 22 17:50:58 2010 From: sjoerdoo at ripe.net (Sjoerd Oostdijck) Date: Fri, 22 Jan 2010 17:50:58 +0100 Subject: [dns-wg] Reverse DNS Outage Announcement Message-ID: <4B59D772.4060002@ripe.net> [Apologies for duplicates] Dear Colleagues, At 13:50 on Thursday, 21 January, an error was introduced into the RIPE NCC's reverse DNS provisioning system. This caused reverse DNS delegations to stop working for allocations in the following range: 77.0.0.0 to 77.220.7.255 This error was triggered by an internal cleanup of our Early Registration Transfer (ERX) DNS delegations, which was being conducted as part of the RIPE NCC's Registration Data Quality (RDQ) project. The reverse DNS provisioning system was corrected again on 22 January at 09:50 (UTC). However, due to negative caching in DNS resolvers, the problem may have remained visible for a further two hours. The RIPE NCC is currently revising the reverse DNS provisioning system to prevent errors such as this occurring in future. If you have any questions or comments, please send an email to . Regards, Sjoerd Oostdijck DNS Services Group, RIPE NCC From mehmet at icann.org Mon Jan 25 10:56:56 2010 From: mehmet at icann.org (Mehmet Akcin) Date: Mon, 25 Jan 2010 01:56:56 -0800 Subject: [dns-wg] L-Root Maintenance 2010-01-27 1800 UTC - 2000 UTC Message-ID: Hi As part of staged, incremental deployment of DNSSEC in the root zone L-Root will begin serving a Deliberately Unvalidatable Root Zone (DURZ) after the completion of its scheduled maintenance at 2010-01-27 1800 UTC - 2000 UTC Please contact L-Root NOC via noc at dns.icann.org or T: +1.310.301.5817 if you have any questions. Please contact with rootsign at icann.org if you have any questions regarding DNSSEC Deployment at root zone. Regards Joe Abley / Mehmet Akcin / Dave Knight ICANN DNS Ops / L-ROOT