North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

[db-wg] DNSSEC deployment on the reverse tree. (fwd)

  • From: william(at)elan.net
  • Date: Mon Sep 12 04:05:41 2005



FYI - RIPE seems to be getting ready to deploy DNSSEC on inaddr (rdns)
tree so I thought nanog folks might want to know about it too being the kind operational issue that we don't seem to be discussing here lately quite as much...

BTW - are there any plans to deploy DNSSEC for ARIN ip dns tree and if so when are the good people at ARIN planning to tell about it? And perhaps presentation about DNSSEC on ip dns tree and how it is being handled and what we should be ready for maybe good to have at upcoming NANOG meeting.

---------- Forwarded message ----------
Date: Mon, 12 Sep 2005 09:39:48 +0200
From: Henk Uijterwaal <[email protected]>
To: [email protected], [email protected]
Subject: [db-wg] DNSSEC deployment on the reverse tree.

Dear Colleagues,

In June, Olaf Kolkman wrote:

The RIPE NCC has been involved with the development of the DNSSEC
protocol. Now that the protocol has become available, we plan to
implement DNSSEC on our domains in the reverse DNS tree. The
deployment of DNSSEC is the second and last phase of the Reverse DNS
restructuring project. [...]
We welcome your feedback on this poposal before 1 August 2005. Please
send your comments to the DNS Working Group Mailing List.
The comment period was extended to 1 September and some comments were
posted to the list.  These have all been incorporated and the new
documents are at:

You can find the proposed policy at:

<http://www.ripe.net/rs/reverse/dnssec/draft-dnssec-policy.html>http://www.ripe.net/rs/reverse/dnssec/draft-dnssec-policy.html.
  "DNSSEC Key Maintenance Procedure"

<http://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html>http://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html
  "Procedure for Requesting DNSSEC Delegations"

<http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html>http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html
I'm going to suggest to the chairs of the WG to do a last call on these
documents and have them published as RIPE documents.

Kind regards,

Henk


------------------------------------------------------------------------------
Henk Uijterwaal                           Email: henk.uijterwaal(at)ripe.net
RIPE Network Coordination Centre          http://www.amsterdamned.org/~henk
P.O.Box 10096          Singel 258         Phone: +31.20.5354414
1001 EB Amsterdam      1016 AB Amsterdam  Fax: +31.20.5354445
The Netherlands        The Netherlands    Mobile: +31.6.55861746
------------------------------------------------------------------------------

Look here junior, don't you be so happy.
And for Heaven's sake, don't you be so sad.                 (Tom Verlaine)