[LACNIC/Seguridad] Resumen de Seguridad, Vol 50, Envío 5

Carlos Marcelo Martinez Cagnazzo carlosm3011 en gmail.com
Mie Jul 21 15:55:03 BRT 2010


¡Muchas gracias! Estoy escribiendo un pequeño artículo sobre la
experiencia que espero poder compartir pronto con todos.

2010/7/14  <Oscar_S_Torres en dell.com>:
> Felicidades Estimado Carlos
>
> Slds.
>
>
> ---
> Oscar Torres
> Enterprise  Technical Support Senior Analyst
>
> Dell | Latin America Latin America & Caribbean Enterprise Pro Support
>
> How am I doing?  E-mail my manager nereida_bolanos en dell.com with any feedback.
>
>  Already online?  Feel free to take advantage of our online methods for your future Enterprise support needs!
>
> * For immediate technical assistance, please Chat with us at: www.dell.com/enterprisechat
>
> * For less time-sensitive assistance, please E-mail us at: www.dell.com/enterpriseemail
>
>
>
> -----Original Message-----
> From: seguridad-bounces en lacnic.net [mailto:seguridad-bounces en lacnic.net] On Behalf Of alvaro.sanchez en adinet.com.uy
> Sent: Wednesday, July 14, 2010 10:08 AM
> To: seguridad en lacnic.net
> Subject: Re: [LACNIC/Seguridad] Resumen de Seguridad, Vol 50, Envío 5
>
> FELICITACIONES CARLOS ! ! !
>
>
>>----Mensaje original----
>>De: seguridad-request en lacnic.net
>>Fecha: 14/07/2010 12:00
>>Para: <seguridad en lacnic.net>
>>Asunto: Resumen de Seguridad, Vol 50, Envío 5
>>
>>Envíe los mensajes para la lista Seguridad a
>>       seguridad en lacnic.net
>>
>>Para subscribirse o anular su subscripción a través de la WEB
>>       https://mail.lacnic.net/mailman/listinfo/seguridad
>>
>>O por correo electrónico, enviando un mensaje con el texto "help" en
>>el asunto (subject) o en el cuerpo a:
>>       seguridad-request en lacnic.net
>>
>>Puede contactar con el responsable de la lista escribiendo a:
>>       seguridad-owner en lacnic.net
>>
>>Si responde a algún contenido de este mensaje, por favor, edite la
>>linea del asunto (subject) para que el texto sea mas especifico que:
>>"Re: Contents of Seguridad digest...". Además, por favor, incluya en
>>la respuesta sólo aquellas partes del mensaje a las que está
>>respondiendo.
>>
>>
>>Asuntos del día:
>>
>>   1. Re: [lacnog] Root Zone DNSSEC Deployment Technical Status
>>      Update (Carlos Marcelo Martinez Cagnazzo)
>>   2. Re: [lacnog] Root Zone DNSSEC Deployment Technical Status
>>      Update (Carlos Vera)
>>
>>
>>----------------------------------------------------------------------
>>
>>Message: 1
>>Date: Tue, 13 Jul 2010 15:51:05 -0300
>>From: Carlos Marcelo Martinez Cagnazzo <carlosm3011 en gmail.com>
>>To: Lista para discusión de seguridad en redes y sistemas
> informaticos
>>       de la región <seguridad en lacnic.net>
>>Cc: Latin America and Caribbean Region Network Operators Group
>>       <lacnog en lacnic.net>
>>Subject: Re: [LACNIC/Seguridad] [lacnog] Root Zone DNSSEC Deployment
>>       Technical Status Update
>>Message-ID:
>>       <AANLkTim0D8eUhO2oX-i-YSL5tymF3MccPd3kL1xJsnPH en mail.gmail.com>
>>Content-Type: text/plain; charset=ISO-8859-1
>>
>>Solo para comentar que la ceremonia fue un exito. Tuve el privilegio
>>de poder participar de la misma como Crypto Officer #4, y quiero
>>aprovechar esto para felicitar al staff de ICANN y muy en particular
> a
>>Francisco Arias por todo el trabajo realizado para llegar a este
>>punto.
>>
>>saludos,
>>
>>Carlos Martinez
>>
>>2010/7/12 Francisco Arias <francisco en arias.com.mx>:
>>> Sólo para recordarles que la ceremonia de la KSK de la raíz
> comienza a
>>> las 20:00 UTC de hoy; será transmisión en vivo en:
>>>
>>> http://dns.icann.org/ksk/stream/
>>>
>>> Saludos,
>>>
>>> Francisco.
>>>
>>>
>>>
>>> On 10 July 2010 09:40, Joe Abley <joe.abley en icann.org> wrote:
>>>> Root Zone DNSSEC Deployment
>>>> Technical Status Update 2010-07-10
>>>>
>>>> This is the tenth of a series of technical status updates intended
>>>> to inform a technical audience on progress in signing the root
> zone
>>>> of the DNS.
>>>>
>>>>
>>>> RESOURCES
>>>>
>>>> Details of the project, including documentation published to date,
>>>> can be found at <http://www.root-dnssec.org/>.
>>>>
>>>> We'd like to hear from you. If you have feedback for us, please
>>>> send it to rootsign en icann.org.
>>>>
>>>>
>>>> KSK CEREMONY 2
>>>>
>>>> The second KSK ceremony for the root zone will take place in El
>>>> Segundo, CA, USA on Monday 2010-07-12. The ceremony is scheduled
>>>> to begin at 1300 local time (2000 UTC) and is expected to end by
>>>> 1900 local time (0200 UTC).
>>>>
>>>> Video from Ceremony 2 will be recorded for audit purposes, as with
>>>> Ceremony 1. Video and associated audit materials will be published
>>>> before the signed root enters full production on 2010-07-15.
> Details
>>>> will be circulated before that date.
>>>>
>>>> ICANN will operate a separate camera whose video will not be
> retained
>>>> for audit purposes, but which will instead be streamed live in
> order
>>>> to provide remote observers an opportunity to watch the ceremony.
>>>> The live stream will be provided on a best-effort basis.
>>>>
>>>> The live video stream will be available at:
>>>>
>>>>  http://dns.icann.org/ksk/stream/
>>>>
>>>>
>>>> FULL PRODUCTION SIGNED ROOT ZONE
>>>>
>>>> The transition from Deliberately-Unvalidatable Root Zone (DURZ) to
>>>> production signed root zone will take place on 2010-07-15.
>>>>
>>>> Trust anchor publication, according to draft-icann-dnssec-trust-
> anchor-00
>>>> will take place after the maintenance window closes, once a final
>>>> set of tests have been completed by ICANN and the results have
> been
>>>> found to be positive.
>>>>
>>>>
>>>> FTP ACCESS TO SIGNED ZONE FILES
>>>>
>>>> Following the transition on 2010-07-15 the unsigned root and ARPA
>>>> zone files published at
>>>>
>>>>  ftp://rs.internic.net/domain/
>>>>  ftp://ftp.internic.net/domain/
>>>>
>>>> will be replaced by signed zone files. That is, the zone files
>>>> retrieved from both FTP servers will contain DNSSEC data, and will
>>>> hence faithfully represent the zones being served by root servers.
>>>>
>>>>
>>>> PLANNED DEPLOYMENT SCHEDULE
>>>>
>>>> Already completed:
>>>>
>>>>  2010-01-27: L starts to serve DURZ
>>>>
>>>>  2010-02-10: A starts to serve DURZ
>>>>
>>>>  2010-03-03: M, I start to serve DURZ
>>>>
>>>>  2010-03-24: D, K, E start to serve DURZ
>>>>
>>>>  2010-04-14: B, H, C, G, F start to serve DURZ
>>>>
>>>>  2010-05-05: J starts to serve DURZ
>>>>
>>>>  2010-06-16: First Key Signing Key (KSK) Ceremony
>>>>
>>>> To come:
>>>>
>>>>  2010-07-12: Second Key Signing Key (KSK) Ceremony
>>>>
>>>>  2010-07-15: Distribution of validatable, production, signed root
>>>>    zone; publication of root zone trust anchor
>>>>
>>>>  (Please note that this schedule is tentative and subject to
> change
>>>>  based on testing results or other unforeseen factors.)
>>>>
>>>> _______________________________________________
>>>> LACNOG mailing list
>>>> LACNOG en lacnic.net
>>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>>>
>>> _______________________________________________
>>> Seguridad mailing list
>>> Seguridad en lacnic.net
>>> https://mail.lacnic.net/mailman/listinfo/seguridad
>>>
>>
>>
>>
>>--
>>--
>>=========================
>>Carlos M. Martinez-Cagnazzo
>>http://cagnazzo.name
>>=========================
>>
>>
>>------------------------------
>>
>>Message: 2
>>Date: Tue, 13 Jul 2010 13:59:09 -0500
>>From: Carlos Vera <cveraq en gmail.com>
>>To: Lista para discusión de seguridad en redes y sistemas
> informaticos
>>       de la región <seguridad en lacnic.net>
>>Cc: Latin America and Caribbean Region Network Operators Group
>>       <lacnog en lacnic.net>
>>Subject: Re: [LACNIC/Seguridad] [lacnog] Root Zone DNSSEC Deployment
>>       Technical Status Update
>>Message-ID:
>>       <AANLkTikYZh51TuNdWa2mqmguAVoJHVHvlLGmWswtUhGX en mail.gmail.com>
>>Content-Type: text/plain; charset="iso-8859-1"
>>
>>Lo vi por Internet.. emocionante... felicitaciones a quien
> corresponda...
>>
>>Carlos Vera
>>
>>El 13 de julio de 2010 13:51, Carlos Marcelo Martinez Cagnazzo <
>>carlosm3011 en gmail.com> escribió:
>>
>>> Solo para comentar que la ceremonia fue un exito. Tuve el
> privilegio
>>> de poder participar de la misma como Crypto Officer #4, y quiero
>>> aprovechar esto para felicitar al staff de ICANN y muy en
> particular a
>>> Francisco Arias por todo el trabajo realizado para llegar a este
>>> punto.
>>>
>>> saludos,
>>>
>>> Carlos Martinez
>>>
>>> 2010/7/12 Francisco Arias <francisco en arias.com.mx>:
>>> > Sólo para recordarles que la ceremonia de la KSK de la raíz
> comienza a
>>> > las 20:00 UTC de hoy; será transmisión en vivo en:
>>> >
>>> > http://dns.icann.org/ksk/stream/
>>> >
>>> > Saludos,
>>> >
>>> > Francisco.
>>> >
>>> >
>>> >
>>> > On 10 July 2010 09:40, Joe Abley <joe.abley en icann.org> wrote:
>>> >> Root Zone DNSSEC Deployment
>>> >> Technical Status Update 2010-07-10
>>> >>
>>> >> This is the tenth of a series of technical status updates
> intended
>>> >> to inform a technical audience on progress in signing the root
> zone
>>> >> of the DNS.
>>> >>
>>> >>
>>> >> RESOURCES
>>> >>
>>> >> Details of the project, including documentation published to
> date,
>>> >> can be found at <http://www.root-dnssec.org/>.
>>> >>
>>> >> We'd like to hear from you. If you have feedback for us, please
>>> >> send it to rootsign en icann.org.
>>> >>
>>> >>
>>> >> KSK CEREMONY 2
>>> >>
>>> >> The second KSK ceremony for the root zone will take place in El
>>> >> Segundo, CA, USA on Monday 2010-07-12. The ceremony is scheduled
>>> >> to begin at 1300 local time (2000 UTC) and is expected to end by
>>> >> 1900 local time (0200 UTC).
>>> >>
>>> >> Video from Ceremony 2 will be recorded for audit purposes, as
> with
>>> >> Ceremony 1. Video and associated audit materials will be
> published
>>> >> before the signed root enters full production on 2010-07-15.
> Details
>>> >> will be circulated before that date.
>>> >>
>>> >> ICANN will operate a separate camera whose video will not be
> retained
>>> >> for audit purposes, but which will instead be streamed live in
> order
>>> >> to provide remote observers an opportunity to watch the
> ceremony.
>>> >> The live stream will be provided on a best-effort basis.
>>> >>
>>> >> The live video stream will be available at:
>>> >>
>>> >>  http://dns.icann.org/ksk/stream/
>>> >>
>>> >>
>>> >> FULL PRODUCTION SIGNED ROOT ZONE
>>> >>
>>> >> The transition from Deliberately-Unvalidatable Root Zone (DURZ)
> to
>>> >> production signed root zone will take place on 2010-07-15.
>>> >>
>>> >> Trust anchor publication, according to
>>> draft-icann-dnssec-trust-anchor-00
>>> >> will take place after the maintenance window closes, once a
> final
>>> >> set of tests have been completed by ICANN and the results have
> been
>>> >> found to be positive.
>>> >>
>>> >>
>>> >> FTP ACCESS TO SIGNED ZONE FILES
>>> >>
>>> >> Following the transition on 2010-07-15 the unsigned root and
> ARPA
>>> >> zone files published at
>>> >>
>>> >>  ftp://rs.internic.net/domain/
>>> >>  ftp://ftp.internic.net/domain/
>>> >>
>>> >> will be replaced by signed zone files. That is, the zone files
>>> >> retrieved from both FTP servers will contain DNSSEC data, and
> will
>>> >> hence faithfully represent the zones being served by root
> servers.
>>> >>
>>> >>
>>> >> PLANNED DEPLOYMENT SCHEDULE
>>> >>
>>> >> Already completed:
>>> >>
>>> >>  2010-01-27: L starts to serve DURZ
>>> >>
>>> >>  2010-02-10: A starts to serve DURZ
>>> >>
>>> >>  2010-03-03: M, I start to serve DURZ
>>> >>
>>> >>  2010-03-24: D, K, E start to serve DURZ
>>> >>
>>> >>  2010-04-14: B, H, C, G, F start to serve DURZ
>>> >>
>>> >>  2010-05-05: J starts to serve DURZ
>>> >>
>>> >>  2010-06-16: First Key Signing Key (KSK) Ceremony
>>> >>
>>> >> To come:
>>> >>
>>> >>  2010-07-12: Second Key Signing Key (KSK) Ceremony
>>> >>
>>> >>  2010-07-15: Distribution of validatable, production, signed
> root
>>> >>    zone; publication of root zone trust anchor
>>> >>
>>> >>  (Please note that this schedule is tentative and subject to
> change
>>> >>  based on testing results or other unforeseen factors.)
>>> >>
>>> >> _______________________________________________
>>> >> LACNOG mailing list
>>> >> LACNOG en lacnic.net
>>> >> https://mail.lacnic.net/mailman/listinfo/lacnog
>>> >>
>>> > _______________________________________________
>>> > Seguridad mailing list
>>> > Seguridad en lacnic.net
>>> > https://mail.lacnic.net/mailman/listinfo/seguridad
>>> >
>>>
>>>
>>>
>>> --
>>> --
>>> =========================
>>> Carlos M. Martinez-Cagnazzo
>>> http://cagnazzo.name
>>> =========================
>>> _______________________________________________
>>> Seguridad mailing list
>>> Seguridad en lacnic.net
>>> https://mail.lacnic.net/mailman/listinfo/seguridad
>>>
>>------------ próxima parte ------------
>>Se ha borrado un adjunto en formato HTML...
>>URL: <http://mail.lacnic.
> net/pipermail/seguridad/attachments/20100713/27de8c23/attachment.html>
>>
>>------------------------------
>>
>>_______________________________________________
>>Seguridad mailing list
>>Seguridad en lacnic.net
>>https://mail.lacnic.net/mailman/listinfo/seguridad
>>
>>
>>Fin de Resumen de Seguridad, Vol 50, Envío 5
>>********************************************
>>
>
>
> _______________________________________________
> Seguridad mailing list
> Seguridad en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/seguridad
> _______________________________________________
> Seguridad mailing list
> Seguridad en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/seguridad
>



-- 
--
=========================
Carlos M. Martinez-Cagnazzo
http://cagnazzo.name
=========================



Más información sobre la lista de distribución Seguridad