[dns-wg] Deletion of ns-v6.ripe.net

Hi,

On Tue, Apr 24, 2018 at 04:25:59PM +0100, Jim Reid wrote:
> Thanks Job. Though I wasn???t thinking (or caring) about github crapware. I was thinking about stuff that might have been written for internal use -- say at an ISP -- and would only show up whenever these scripts or whatever made queries for ns-v6.ripe.net.

I would say that such software needs to be broken, often, and hard.

There is never a reason to hardwire the hostname of other people's DNS
servers in your software, except if said software does special DNS checks
("is this list of servers that I expect to be authoritative for my zones
up to date?").  And even for those cases, the software should consult
what is in the delegation records, not "a hardwired list"...

(I won't say we do not have something, somewhere, that assumes that
there is a ns-v6.ripe.net - but if we have, it needs to explode so we
can find and repair it)


OTOH it might be worth some considerations about "soft landing" - that
is, point ns-v6.ripe.net at a new server that logs queries, respons to
everything with SERVFAIL (or forwards to ns.ripe.net?), and if you see 
significant traffic, contact the sender and notify them of the coming
end...

Gert Doering
        -- writer of scripts that do stupid things
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: </ripe/mail/archives/dns-wg/attachments/20180424/19e7b28a/attachment.sig>