From francisco at arias.com.mx Fri Dec 4 03:23:01 2009 From: francisco at arias.com.mx (Francisco Arias) Date: Thu, 3 Dec 2009 21:23:01 -0800 Subject: [lacnog] Fwd: [dnssec-deployment] google resolver? In-Reply-To: References: Message-ID: Ahora Google est? ofreciendo servicio p?blio de DNS resolver. Saludos, fjac ---------- Forwarded message ---------- From: Richard Lamb Date: 2009/12/3 Subject: [dnssec-deployment] google resolver? To: DNSSEC deployment http://googlecode.blogspot.com/2009/12/introducing-google-public-dns-new-dns.html ############################################################# This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: A public archive is available here: < http://mail.shinkuro.com:8100/Lists/dnssec-deployment/> and older material is at -------------- next part -------------- An HTML attachment was scrubbed... URL: From francisco at arias.com.mx Wed Dec 16 03:16:29 2009 From: francisco at arias.com.mx (Francisco Arias) Date: Tue, 15 Dec 2009 21:16:29 -0800 Subject: [lacnog] Fwd: Root zone DNSSEC deployment web site and technical status update In-Reply-To: <20091215224747.GW13415@dul1mcmlarson-l1.vcorp.ad.vrsn.com> References: <20091215224747.GW13415@dul1mcmlarson-l1.vcorp.ad.vrsn.com> Message-ID: Por si no han visto el correo. Quiz? lo m?s importante, el sitio http://www.root-dnssec.org/ y el que la zona ra?z firmada comenzar? a ser visible en la semana del 11 de enero pr?ximo en uno de los servidores ra?z. Abajo pueden ver la agenda completa de c?mo ir? siendo distribuido la zona a cada uno de los servidores ra?z. Para quienes operen DNSs recursivos y firewalls (ISP's), si no lo han hecho ya, es el momento de revisar la infraestructura para asegurar que las respuestas de DNS mayores a 512 Bytes pueden transitar por sus redes y/o ser procesadas por sus servidores recursivos. Hay que soportar ENDS0 y TCP en los servidores recursivos tambi?n. Me parece que ya tenemos un tema para reuni?n de Cura?ao ... Saludos, Francisco. ---------- Forwarded message ---------- From: Matt Larson Date: 2009/12/15 Subject: [dns-operations] Root zone DNSSEC deployment web site and technical status update To: dns-operations at mail.dns-oarc.net The root zone DNSSEC deployment team is pleased to announce a new web site with information about the project, http://www.root-dnssec.org. The site serves as a repository for documentation and information about deploying DNSSEC in the root zone, including technical status updates. The first status update is available on the site and is included below, as well. Additional documentation will be posted as it becomes available. Important announcements and future status updates will appear in the site's RSS feed, http://www.root-dnssec.org/rss. The design team welcomes your feedback: you can reach the entire team at rootsign at icann.org. On behalf of the root zone DNSSEC deployment team, Matt Larson -- Status Update, December, 2009 This is the first of a series of technical status updates intended to inform a technical audience on the progress of deploying DNSSEC in the root zone of the DNS. RESOURCES Details of the project, including documentation published to date, can be found at http://www.root-dnssec.org/. We'd like to hear from you. If you have feedback for us, please send it to rootsign at icann.org. DOCUMENTATION This project involves the creation of a large volume of documentation, individual components of which will be released as they have completed internal review. The following documents are expected to be released as drafts before the end of December 2009: * Root Zone DNSSEC Deployment Plan * Root Zone Trust Anchor Publication DEPLOYMENT STATUS Several root server operators have started testing a lightweight packet capture tool designed to provide a full record of priming queries received over the period covering DNSSEC deployment in the root zone. We hope this data collection will be in full production on all root servers before the end of December, providing baseline data which will allow the reaction of the system as a whole to deployment events to be observed. On 2009-12-01, the first pre-production KSR exchange between ICANN and VeriSign and the signing of the root zone within VeriSign's production infrastructure commenced. The signing, validation, measurement and monitoring infrastructure will now be subject to full internal testing. PLANNED DEPLOYMENT SCHEDULE 2009-12-01: KSR exchange, root zone signing begins, internal to VeriSign and ICANN; generation of DURZ Week of 2010-01-11: L starts to serve DURZ Week of 2010-02-08: A starts to serve DURZ Week of 2010-03-01: M, I start to serve DURZ Week of 2010-03-22: D, K, E start to serve DURZ Week of 2010-04-12: B, H, C, G, F start to serve DURZ Week of 2010-05-03: J starts to serve DURZ 2010-07-01: Distribution of validatable, production, signed root zone; publication of root zone trust anchor. (Please note that this schedule is tentative and subject to change based on testing results or other unforeseen factors.) _______________________________________________ dns-operations mailing list dns-operations at lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations -------------- next part -------------- An HTML attachment was scrubbed... URL: From mehmet at akcin.net Wed Dec 16 03:17:24 2009 From: mehmet at akcin.net (Mehmet Akcin) Date: Tue, 15 Dec 2009 21:17:24 -0800 Subject: [lacnog] Fwd: Root zone DNSSEC deployment web site and technical status update In-Reply-To: References: <20091215224747.GW13415@dul1mcmlarson-l1.vcorp.ad.vrsn.com> Message-ID: This was fast :) thank you i was about to do that Mehmet On Dec 15, 2009, at 9:16 PM, Francisco Arias wrote: > Por si no han visto el correo. > > Quiz? lo m?s importante, el sitio http://www.root-dnssec.org/ y el que la zona ra?z firmada comenzar? a ser visible en la semana del 11 de enero pr?ximo en uno de los servidores ra?z. Abajo pueden ver la agenda completa de c?mo ir? siendo distribuido la zona a cada uno de los servidores ra?z. > > Para quienes operen DNSs recursivos y firewalls (ISP's), si no lo han hecho ya, es el momento de revisar la infraestructura para asegurar que las respuestas de DNS mayores a 512 Bytes pueden transitar por sus redes y/o ser procesadas por sus servidores recursivos. Hay que soportar ENDS0 y TCP en los servidores recursivos tambi?n. > > Me parece que ya tenemos un tema para reuni?n de Cura?ao ... > > Saludos, > > Francisco. > > > ---------- Forwarded message ---------- > From: Matt Larson > Date: 2009/12/15 > Subject: [dns-operations] Root zone DNSSEC deployment web site and technical status update > To: dns-operations at mail.dns-oarc.net > > > The root zone DNSSEC deployment team is pleased to announce a new web > site with information about the project, http://www.root-dnssec.org. > The site serves as a repository for documentation and information > about deploying DNSSEC in the root zone, including technical status > updates. The first status update is available on the site and is > included below, as well. Additional documentation will be posted as > it becomes available. Important announcements and future status > updates will appear in the site's RSS feed, > http://www.root-dnssec.org/rss. > > The design team welcomes your feedback: you can reach the entire team > at rootsign at icann.org. > > On behalf of the root zone DNSSEC deployment team, > > Matt Larson > > -- > > Status Update, December, 2009 > > This is the first of a series of technical status updates intended to > inform a technical audience on the progress of deploying DNSSEC in the > root zone of the DNS. > > RESOURCES > > Details of the project, including documentation published to date, can > be found at http://www.root-dnssec.org/. > > We'd like to hear from you. If you have feedback for us, please send > it to rootsign at icann.org. > > DOCUMENTATION > > This project involves the creation of a large volume of documentation, > individual components of which will be released as they have completed > internal review. The following documents are expected to be released > as drafts before the end of December 2009: > > * Root Zone DNSSEC Deployment Plan > * Root Zone Trust Anchor Publication > > DEPLOYMENT STATUS > > Several root server operators have started testing a lightweight > packet capture tool designed to provide a full record of priming > queries received over the period covering DNSSEC deployment in the > root zone. We hope this data collection will be in full production on > all root servers before the end of December, providing baseline data > which will allow the reaction of the system as a whole to deployment > events to be observed. > > On 2009-12-01, the first pre-production KSR exchange between ICANN and > VeriSign and the signing of the root zone within VeriSign's production > infrastructure commenced. The signing, validation, measurement and > monitoring infrastructure will now be subject to full internal > testing. > > PLANNED DEPLOYMENT SCHEDULE > > 2009-12-01: KSR exchange, root zone signing begins, internal to > VeriSign and ICANN; generation of DURZ > > Week of 2010-01-11: L starts to serve DURZ > > Week of 2010-02-08: A starts to serve DURZ > > Week of 2010-03-01: M, I start to serve DURZ > > Week of 2010-03-22: D, K, E start to serve DURZ > > Week of 2010-04-12: B, H, C, G, F start to serve DURZ > > Week of 2010-05-03: J starts to serve DURZ > > 2010-07-01: Distribution of validatable, production, signed root zone; > publication of root zone trust anchor. > > (Please note that this schedule is tentative and subject to change > based on testing results or other unforeseen factors.) > _______________________________________________ > dns-operations mailing list > dns-operations at lists.dns-oarc.net > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > > _______________________________________________ > LACNOG mailing list > LACNOG at lacnic.net > https://mail.lacnic.net/mailman/listinfo/lacnog