- EURO-Discuss - lists.icann.org

personal changes for Dessi Pefeva
by DessiGreve Sept. 5, 2008

Sept. 5, 2008

Dear colleagues, I am happy to announce that I got married recently ant thus my family name is changed now to Greve. My contact details are as follows: Dragoslava Greve tel. +41 43 5346366 I am located in Zurich, Switzerland. My email stays the same as before, but you might want to add my private address also: avagreve(a)gmail.com Best regards, Dessi

7 6

Re: [EURO-Discuss] EURO-Discuss Digest, Vol 23, Issue 6
by Siranush Vardanyan Sept. 4, 2008

Sept. 4, 2008

My warmest congratulations to Sebastien and Patrick for being selected at EURALO and also to Dessi. Best Siranush Siranush Vardanyan Armenia > From: euro-discuss-request(a)atlarge-lists.icann.org> Subject: EURO-Discuss Digest, Vol 23, Issue 6> To: euro-discuss(a)atlarge-lists.icann.org> Date: Thu, 4 Sep 2008 12:00:32 -0400> > Send EURO-Discuss mailing list submissions to> euro-discuss(a)atlarge-lists.icann.org> > To subscribe or unsubscribe via the World Wide Web, visit> http://atlarge-lists.icann.org/mailman/listinfo/euro-discuss_atlarge-lists.…> > or, via email, send a message with subject or body 'help' to> euro-discuss-request(a)atlarge-lists.icann.org> > You can reach the person managing the list at> euro-discuss-owner(a)atlarge-lists.icann.org> > When replying, please edit your Subject line so it is more specific> than "Re: Contents of EURO-Discuss digest..."> > > Today's Topics:> > 1. Re: personal changes for Dessi Pefeva (Nick Ashton-Hart)> 2. Re: personal changes for Dessi Pefeva (Kleinw?chter)> 3. Re: personal changes for Dessi Pefeva (Patrick Vande Walle)> 4. Re: personal changes for Dessi Pefeva (Veni Markovski)> 5. Re: personal changes for Dessi Pefeva (Vittorio Bertola)> 6. Re: [ALAC] Result of EURALO ALAC Representative Elections for> 2008 (Jacqueline A. Morris)> > > ----------------------------------------------------------------------> > Message: 1> Date: Wed, 3 Sep 2008 09:59:02 -0700> From: Nick Ashton-Hart <Nick.Ashton-Hart(a)icann.org>> Subject: Re: [EURO-Discuss] personal changes for Dessi Pefeva> To: Europe Discuss <euro-discuss(a)atlarge-lists.icann.org>> Message-ID: <C4E48EF6.5619B%nick.ashton-hart(a)icann.org>> Content-Type: text/plain; charset="iso-8859-1"> > My congratulations to Dessi and Georg Greve, whom I have the good fortune to know personally :)> > > On 03/09/2008 16:40, "DessiGreve" <dpefeva(a)isoc.bg> wrote:> > Dear colleagues,> > I am happy to announce that I got married recently ant thus my family> name is changed now to Greve.> My contact details are as follows:> Dragoslava Greve> tel. +41 43 5346366> I am located in Zurich, Switzerland.> > My email stays the same as before, but you might want to add my private> address also: avagreve(a)gmail.com> > Best regards,> > Dessi> > > _______________________________________________> EURO-Discuss mailing list> EURO-Discuss(a)atlarge-lists.icann.org> http://atlarge-lists.icann.org/mailman/listinfo/euro-discuss_atlarge-lists.…> > Homepage for the region: http://www.euralo.org> > > --> > Regards,> > Nick Ashton-Hart> Director for At-Large> Internet Corporation for Assigned Names and Numbers (ICANN)> Main Tel: +33 (450) 40 46 88> USA DD: +1 (310) 578-8637> Fax: +41 (22) 594-85-44> Mobile: +41 (79) 595 54-68> email: nick.ashton-hart(a)icann.org> Win IM: ashtonhart(a)hotmail.com / AIM/iSight: nashtonhart(a)mac.com / Skype: nashtonhart> Online Bio: https://www.linkedin.com/in/ashtonhart> > > ------------------------------> > Message: 2> Date: Wed, 03 Sep 2008 20:05:57 +0200> From: Kleinw?chter, Wolfgang> <wolfgang.kleinwaechter(a)medienkomm.uni-halle.de>> Subject: Re: [EURO-Discuss] personal changes for Dessi Pefeva> To: Discussion for At-Large Europe> <euro-discuss(a)atlarge-lists.icann.org>> Message-ID:> <2DA93620FC07494C926D60C8E3C2F1A8426202(a)server1.medienkomm.uni-halle.de>> > Content-Type: text/plain; charset=iso-8859-1> > Congratulations both of you> > Wolfgang> > ________________________________> > From: euro-discuss-bounces(a)atlarge-lists.icann.org on behalf of DessiGreve> Sent: Wed 03/09/2008 4:40 PM> To: Discussion for At-Large Europe> Subject: [EURO-Discuss] personal changes for Dessi Pefeva> > > > Dear colleagues,> > I am happy to announce that I got married recently ant thus my family> name is changed now to Greve.> My contact details are as follows:> Dragoslava Greve> tel. +41 43 5346366> I am located in Zurich, Switzerland.> > My email stays the same as before, but you might want to add my private> address also: avagreve(a)gmail.com> > Best regards,> > Dessi> > > _______________________________________________> EURO-Discuss mailing list> EURO-Discuss(a)atlarge-lists.icann.org> http://atlarge-lists.icann.org/mailman/listinfo/euro-discuss_atlarge-lists.…> > Homepage for the region: http://www.euralo.org <http://www.euralo.org/> > > > > > > ------------------------------> > Message: 3> Date: Wed, 03 Sep 2008 20:26:54 +0200> From: Patrick Vande Walle <patrick(a)vande-walle.eu>> Subject: Re: [EURO-Discuss] personal changes for Dessi Pefeva> To: Discussion for At-Large Europe> <euro-discuss(a)atlarge-lists.icann.org>> Message-ID: <48BED6EE.2010007(a)vande-walle.eu>> Content-Type: text/plain; charset=ISO-8859-1> > Congratulations, Dessi! I wish you a lot of happiness !> > Patrick> > DessiGreve wrote:> > Dear colleagues,> > > > I am happy to announce that I got married recently ant thus my family > > name is changed now to Greve.> > My contact details are as follows:> > Dragoslava Greve> > tel. +41 43 5346366> > I am located in Zurich, Switzerland.> > > > My email stays the same as before, but you might want to add my private > > address also: avagreve(a)gmail.com> > > > Best regards,> > > > Dessi> >> > > > ------------------------------> > Message: 4> Date: Wed, 03 Sep 2008 15:34:16 -0400> From: Veni Markovski <veni(a)veni.com>> Subject: Re: [EURO-Discuss] personal changes for Dessi Pefeva> To: patrick(a)vande-walle.eu, Discussion for At-Large Europe> <euro-discuss(a)atlarge-lists.icann.org>> Message-ID: <20080903194135.3182690334(a)mxr.isoc.bg>> Content-Type: text/plain; charset="us-ascii"; format=flowed> > Just to make sure you don't think we have not been there: > http://blog.veni.com (and www.isoc.bg, but only in Bulgarian) ;)> > veni> > > > > ------------------------------> > Message: 5> Date: Thu, 4 Sep 2008 11:15:22 +0200 (CEST)> From: "Vittorio Bertola" <vb(a)bertola.eu>> Subject: Re: [EURO-Discuss] personal changes for Dessi Pefeva> To: "Discussion for At-Large Europe"> <euro-discuss(a)atlarge-lists.icann.org>> Message-ID:> <35550.196.46.0.243.1220519722.squirrel(a)webmail.dynamicfun.com>> Content-Type: text/plain;charset=iso-8859-1> > Nick Ashton-Hart ha scritto:> > My congratulations to Dessi and Georg Greve, whom I have the good fortune> > to know personally :)> > Congratulations to both - sure it was a very free marriage :-)> -- > vb. Vittorio Bertola - vb [a] bertola.eu <--------> --------> finally with a new website at http://bertola.eu/ <--------> > > > > ------------------------------> > Message: 6> Date: Wed, 03 Sep 2008 08:42:27 -0400> From: "Jacqueline A. Morris" <jam(a)jacquelinemorris.com>> Subject: Re: [EURO-Discuss] [ALAC] Result of EURALO ALAC> Representative Elections for 2008> To: Nick Ashton-Hart <Nick.Ashton-Hart(a)icann.org>> Cc: Europe Discuss <euro-discuss(a)atlarge-lists.icann.org>,> "regional-liaisons(a)icann.org" <regional-liaisons(a)icann.org>, ALAC> Working List <alac(a)atlarge-lists.icann.org>, Maria Farrell> <maria.farrell(a)icann.org>> Message-ID: <48BE8633.6020702(a)jacquelinemorris.com>> Content-Type: text/plain; charset=ISO-8859-1; format=flowed> > Congrats Sebastien and Patrick!> Jacqueline> Nick Ashton-Hart wrote:> > Dear EURALO Members:> >> > It is my honour to provide the results of the 2008 EURALO Elections to fill the open ALAC seat vacated by Veronica Cretu, and the seat currently occupied by Sebastien Bachollet which was up for election.> >> > Full information about the election procedures and candidatures may be found at http://atlarge-lists.icann.org/pipermail/euro-discuss_atlarge-lists.icann.o…. Some election procedures were amended by the Chair for technical reasons; that information may be found at: http://atlarge-lists.icann.org/pipermail/euro-discuss_atlarge-lists.icann.o… Note that the fourth candidate, Adela Danciu, declined to run due to work commitments prior to the vote being opened.> >> > Of the 24 authorised ALS representatives entitled to vote, 18 cast a vote, representing 75% participation.> >> > The candidate finishing in first place, Sebastien Bachollet, will therefore take the two-year seat, commencing at the closing of the ICANN AGM in Cairo on 7th November and concluding at the close of the ICANN AGM in 2010.> >> > The candidate finishing in second place, Patrick Vande Walle, will join the ALAC with immediate effect to fill the vacancy created by the resignation of Veronica Cretu, and will serve until the closing of the ICANN AGM in 2009.> >> > Independent verification of the voting results may be found on the BigPulse servers, which is the third-party, secured voting system used for conduct of this vote (and all others in the At-Large community). A direct link to the vote results may be found at the following URL: https://www.bigpulse.com/pollresults?code=izyqasVfrAgfGW9rKwE9> >> > The Staff would like to congratulate Sebastien and Patrick and thank Lutz for his candidacy. Without volunteers willing to spend their free time and energy in leadership roles like these three gentlemen, the ICANN multi-stakeholder model simply would not work and we are grateful to have had three such excellent candidates who were williing to serve.> > --> >> > Regards,> >> > Nick Ashton-Hart> > Director for At-Large> > Internet Corporation for Assigned Names and Numbers (ICANN)> > Main Tel: +33 (450) 40 46 88> > USA DD: +1 (310) 578-8637> > Fax: +41 (22) 594-85-44> > Mobile: +41 (79) 595 54-68> > email: nick.ashton-hart(a)icann.org> > Win IM: ashtonhart(a)hotmail.com / AIM/iSight: nashtonhart(a)mac.com / Skype: nashtonhart> > Online Bio: https://www.linkedin.com/in/ashtonhart> > _______________________________________________> > ALAC mailing list> > ALAC(a)atlarge-lists.icann.org> > http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann.org> >> > At-Large Online: http://www.atlarge.icann.org> > ALAC Working Wiki: http://st.icann.org/alac> > > > > > > ------------------------------> > _______________________________________________> EURO-Discuss mailing list> EURO-Discuss(a)atlarge-lists.icann.org> http://atlarge-lists.icann.org/mailman/listinfo/euro-discuss_atlarge-lists.…> > > End of EURO-Discuss Digest, Vol 23, Issue 6> ******************************************* _________________________________________________________________ Discover the new Windows Vista http://search.msn.com/results.aspx?q=windows+vista&mkt=en-US&form=QBRE

1 0

Result of EURALO ALAC Representative Elections for 2008
by Nick Ashton-Hart Sept. 3, 2008

Sept. 3, 2008

Dear EURALO Members: It is my honour to provide the results of the 2008 EURALO Elections to fill the open ALAC seat vacated by Veronica Cretu, and the seat currently occupied by Sebastien Bachollet which was up for election. Full information about the election procedures and candidatures may be found at http://atlarge-lists.icann.org/pipermail/euro-discuss_atlarge-lists.icann.o…. Some election procedures were amended by the Chair for technical reasons; that information may be found at: http://atlarge-lists.icann.org/pipermail/euro-discuss_atlarge-lists.icann.o… Note that the fourth candidate, Adela Danciu, declined to run due to work commitments prior to the vote being opened. Of the 24 authorised ALS representatives entitled to vote, 18 cast a vote, representing 75% participation. The candidate finishing in first place, Sebastien Bachollet, will therefore take the two-year seat, commencing at the closing of the ICANN AGM in Cairo on 7th November and concluding at the close of the ICANN AGM in 2010. The candidate finishing in second place, Patrick Vande Walle, will join the ALAC with immediate effect to fill the vacancy created by the resignation of Veronica Cretu, and will serve until the closing of the ICANN AGM in 2009. Independent verification of the voting results may be found on the BigPulse servers, which is the third-party, secured voting system used for conduct of this vote (and all others in the At-Large community). A direct link to the vote results may be found at the following URL: https://www.bigpulse.com/pollresults?code=izyqasVfrAgfGW9rKwE9 The Staff would like to congratulate Sebastien and Patrick and thank Lutz for his candidacy. Without volunteers willing to spend their free time and energy in leadership roles like these three gentlemen, the ICANN multi-stakeholder model simply would not work and we are grateful to have had three such excellent candidates who were williing to serve. -- Regards, Nick Ashton-Hart Director for At-Large Internet Corporation for Assigned Names and Numbers (ICANN) Main Tel: +33 (450) 40 46 88 USA DD: +1 (310) 578-8637 Fax: +41 (22) 594-85-44 Mobile: +41 (79) 595 54-68 email: nick.ashton-hart(a)icann.org Win IM: ashtonhart(a)hotmail.com / AIM/iSight: nashtonhart(a)mac.com / Skype: nashtonhart Online Bio: https://www.linkedin.com/in/ashtonhart

8 7

9 September 1300 UTC: Discussion on ICANN Travel Procedures and the ALAC Review
by At-Large Staff Sept. 3, 2008

Sept. 3, 2008

Dear all, You have been invited by the ALAC Chair Cheryl Langdon-Orr to join a community-wide discussion on the new ICANN travel procedures and the ALAC Review on Tuesday September 9th. The discussion will start at 1300 UTC and is scheduled to for 30 minutes. It will precede the monthly ALAC teleconference scheduled at 1330 UTC. French and Spanish interpretation will be available for this call if requested. Please get in touch with us before Friday, 1200 UTC if you would like to be on either the French or Spanish channel. If you are in a country with a toll free phone number you can use this number and the access codes to join the English, French or Spanish channel. A list of the toll free phone numbers is available on the meeting page for this meeting. https://st.icann.org/alac/index.cgi?09_september_2008 You will also find additional documents with background information on the ICANN travel procedures and the ALAC Review on this page. Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

1 0

REMINDER / last call for EURALO – ALAC voting
by Wolf Ludwig Sept. 2, 2008

Sept. 2, 2008

Dear all, as far as I have noted, several of our ALSes with voting rights accomplished their voting for our two new ALAC reps. on bigpulse already (with your personal sign-in details you received from the Staff last week). I simply would like to remind all those who DIDN’T VOTE so far to do this the NEXT 24 HOURS because the deadline expires tomorrow evening and ALL ALSes should have voted by then. Thanks for your participation and regards, Wolf comunica-ch phone +41 79 204 83 87 Skype: Wolf-Ludwig www.comunica-ch.net Digitale Allemd http://blog.allmend.ch - EURALO https://st.icann.org/euralo/index.cgi?euralo_icann_at_large_europe

3 4

Re: [EURO-Discuss] ALAC-WG on DNSSEC
by Lutz Donnerhacke Sept. 2, 2008

Sept. 2, 2008

On Mon, Sep 01, 2008 at 03:24:25PM +0200, JFC Morfin wrote: > I blame no one. I just infer from your semantic (and side echoes from > ccNSO) that the actual purpose is not technical validation but > production, while production implies much more than technical validation. I like to use the existing testbed for a two week production grade test over the Cairo meeting. Consider it as a testbed, too. This does not mean, that all root servers out there got be signed in those days, but the recursive server at the meeting do the validation with the testbed servers. > >DNSSEC is one of the current activities of ICANN and therefore a current > >matter for ALAC. One might ask if DNSSEC is too urgent for AtLarge, the > >ALSes, and the users out there. Because AtLarge should guide the process, > >the ALSes should think about this subject. That's why I like to have a track > >on the summit. > > This is correct. However, my question is for the ALAC (on behalf of > the users) to decide first that DNSSEC / EDNS0 and NSEC3 is the way > to go, technically, strategically and politically wise. Yes, that should be discussed. > The role of an advisory committee is to just that, not to copy others' > positions. In the process ALAC should also come with additional DNSSEC > deployment advises about the user side and the global consistency. Ack. > For example, I raised the question at the IETF/WG-IDNABIS of the > DNSSEC + IDN + IDNccTLD datagram size. When you consider the real > status of the Internet > (http://www.caida.org/workshops/wide/0801/slides/castro-ditl_comparison.pdf) > you see that the EDNS0 proportion decreases. The reason might be simple: DNS servers does not use EDNS0 by default anymore, only when needed. And they turn off EDNS0 per server, if any error occured. I would not claim that EDNS0 support decreased. > >Of course. Unbound is sponsored by Verisign and the code was written by the > >big, bad, and ugly NSA agents. ... Sorry, please let keep us on safe grounds. > > If this is your position I leave it to you. If it is supposed to a > joke at mine, I afraid you are totally out target :-) I forgot to add an irony ascii-art, sorry. > >That's why the introduction of DNSSEC is much easier than any IPv6 rollout. > > As Euralo we have no Chinese user online. It would be interesting to > know from them. Or from Comcast. Why do you look far away? Why do you not accept experience from others? What do you expect? http://www.ipv6council.de/events/german_ipv6_summit/programme.html http://www.guug.de/veranstaltungen/ecai6-2007/abstracts.html

2 1

Re: [EURO-Discuss] ALAC-WG on DNSSEC
by Lutz Donnerhacke Sept. 1, 2008

Sept. 1, 2008

On Mon, Sep 01, 2008 at 01:59:34AM +0200, JFC Morfin wrote: > At 01:04 01/09/2008, Lutz Donnerhacke wrote: > >Please understand why the IANA >signed root is not considered as > >production ready: They do construct errors in the zone to see how > >clients in the testbed react. > > So, you mean they actually are working actively on deploying DNSSEC > without anyone being informed? Why did you not inform yourself before blaming others? http://ipv6.google.com/search?hl=de&q=ns.iana.org%2Fdnssec%2Fstatus.html > I understand now why brother Danny teases us in asking if this is not > a too urgent matter for ALAC :-) DNSSEC is one of the current activities of ICANN and therefore a current matter for ALAC. One might ask if DNSSEC is too urgent for AtLarge, the ALSes, and the users out there. Because AtLarge should guide the process, the ALSes should think about this subject. That's why I like to have a track on the summit. > >Please do not spread such FUD. Either you know that they pay for or drop > >your suggesting wordings here. > > I just read their own stuff and look at their welcome page. > http://www.unbound.net/ : About Unbound : ~~~~~~~~~~~~~ : Unbound is a validating, recursive, and caching DNS resolver. : : The C implementation of Unbound is developed and maintained by NLnet Labs. : It is based on ideas and algorithms taken from a java prototype developed by : Verisign labs, Nominet, Kirei and ep.net. : : Unbound is designed as a set of modular components, so that also DNSSEC : (secure DNS) validation and stub-resolvers (that do not run as a server, but : are linked into an application) are easily possible. : : The source code is under a BSD License. [cut download sources] : Support : ~~~~~~~ : Unbound is being maintained by NLnet Labs, a not for profit, public benefit : foundation. Problems can be reported through the bugzilla webinterface. In : the case we stop supporting the product we will announce such two years in : advance. Of course. Unbound is sponsored by Verisign and the code was written by the big, bad, and ugly NSA agents. ... Sorry, please let keep us on safe grounds. > >No. From the experience of roll out IPv6 as well as DNSSEC, I'm pretty sure, > >that DNSSEC is much much easier. You do not need to touch every device in > >the net. Only the DNS servers. > > You need to touch _every_ resolver otherwise it does not make sense, > except for merchants. We do not want they have an alibi to control us > and charge us more. We want to be protected, including from them. The > real daily danger for people's DNS are ISP name servers. Not a big > one but a real one. You only have to touch your last trustworthy DNS server for providing DNSSEC validation. The clients are usually not involved. The application software is usually not involved. You only have to touch your authoritive DNS server for providing DNSSEC. That's why the introduction of DNSSEC is much easier than any IPv6 rollout. ------------------------------------------------------------------------ I do not want to talk about my business here. I try to keep it separate. So if you do not want to read about commericial issues, please stop reading. ------------------------------------------------------------------------ > >I give them such a tool. They can pay for remote signing. But they should do > >it themself in the medium term. Those are their zones. > > Is that in some beta form? No, it's productive. > Do you have a documentation? Yes, but currently it's in German only. > How much do you charge? For DNSSEC remote signing between one and ten Euro per zone and month. This covers the managment costs, which relate mostly with the customer accounts, not the amount of zones to sign. Futhermore there are extra QoS fees for exclusive ressouce allocation: Maximum signing delay, life signing, ... Those costs are calculated to pay the some what expensive special hardware. We do not offer overbooked services. > How do the user consider this service: as something they prefer you do for > them? that their ISP should eventually provide? etc. This service is for companies, ISPs, and registrars who need to implement DNSSEC now, but need time to adapt their infrastructure, train their admins and hotline, and rewrite the tool chains. We offer them to buy time. > I do not think there is a DNSSEC business plan as such (as > explained to Danny), My explaination does contain some useful business cases even for the private user. > but if there can be some business plans already for some services, this is > a good news as it would certainly help (and hamper, because there would be > in addition a young industry to deal with in case we want upgrades). These > are certainly things important to know from you. I hope, I made my point clear enough without promoting commerical issues too much. Do you have further questions?

2 1

Re: [EURO-Discuss] ALAC-WG on DNSSEC
by Lutz Donnerhacke Sept. 1, 2008

Sept. 1, 2008

On Sat, Aug 30, 2008 at 02:30:32PM +0200, JFC Morfin wrote: > IMHO the situation today could eventually badly hurt ICANN (depending > on what ICANN wants to be). Questions are: > - is the root server system a good system or not from a user perspective. Yes, it's good. It provide a consistent view of the Internet and prevents large scale censorship by regional gouvnerments. > - is DNSSEC a good solution or not in a root/non root server system > from a user perspective. Yes, it#s good. It offers the users to secure their communication for free and prevents any DNS based censorship (even from local ISPs). > - who should be the concerned operators from a user perspective. >From the SSAC (my other hat) point of view, the current operators do a very good job and are trustworthy. >From the AtLarge point of view, I prefer a multiple signing key concept: You can trust the key holders you like. So if the DOD has one set of root keys, the company Verisign has a second, and other organisations has even other keys, no single party is able to modify the relevant entries without asking for signing all other parties. In the case of short term modifications, the missing signatures from the other parties will detect the modifications as an attack to the system. > - who is endangering the capacity of these operators to develop, why and how. A multi signing key concept vanishs the need for this question, doesn't it? > Yes. But we need to have the @large users to be aware enough of the > root of the root management situation. This is why they must have a > full command of the technical, commercial, strategic, societal and > normative interests involved. This documentation does not exist if I > am correct? There is documentation for all these issues out. If you are interested, I can compile a list, but I'm short of time at the moment. > TLDs) not the old "intlfile", now the NTIA root file (4) because the > largest part of the Internet is now using TLDs and topzone name > servers that are not in the root (China, ISPs, etc.) and if I > understand you well your 15000 users. You might confuse something. An alternative root does not mean, that they are using complete different data. My signed root is derived from the IANA files. So there is mostly no difference. > So the real question are : who is really controlling the IANA, who is > in position to control it in the coming months/years. Is DNSSEC > something of real interest or not depending the way the users use it? > What will be its political consequences on the stability and > interoperability of the Internet. How the semantic addressing and its > hundred of thousands of top zones will be impacted/impact all this. etc. Large questions which should be discussed in detail individually, but not yet ... sorry. > The US position over DNSSEC > will have the first advantage to teach DNSSEC to civil servants and > militairies. That's FUD. Please do not distribute that bullshit. DNSSEC advantage existes in Sweden, Puerto Rico, Brasil, Bulgaria, RIPE, and NLNetlabs. (My company does not count.) US is far behind. > >I fear > >that Atlarge organization is not able to offer this in the full broad sense. > > Let not confuse ALAC and the ALSes. ALS will not able to provide the full chain of documents and support. It's too specific knowlegde. > >That's part of my proposal. I'd like to see the signed root (of IANA) > >productive on the validating resolvers during the whole sumit and meeting. > > Question: what will be the situation of the topzone nameservers which > are not in the root but which are documented in through the TLD nameservers? They will not be asked anymore from the ICANN meeting place. The validation resolvers only ask a set of nameservers with hold the IANA signed zone. > >I run a signed root since more than two years in production environments > >(for ~15000 people) and one of the largest DLVs. > > You mean a signed root Down Loadable Version :-)? ;; QUESTION SECTION: ;. IN DNSKEY ;; ANSWER SECTION: . 36000 IN DNSKEY 256 3 5 BQEAAAABy8CjFJC4LKj+TE7U2h8eqQJ47GjH2JKCqf9X5Di3V8cNbTV0 aDRRbXOAILSjC2mgoLOokPp2YjaVFWYQF7ePFBgvk0rKydnF606jpFW5 3TDmG2qnLwxeFPMwMtTOxT6teGoTWm1t1jxCMWazZUt4qq0ykcgAzd7Q o7z+7gq0vZfZwf6tYMcukrYFdkQUqjh1ewpvjfrhqHpEHP3bM2I+8yzA xBby1vWUO8q9yzSZ7mpezlTyA6j3pV6iE2AAKd2q5kMdzOc8OLiywkef 5i5AswYSZZHcFdEuODQsz6MDxp2RbOwkZf87k8yajzZpgpVUgT38E/fP oAR5rEDC+K83cw== . 36000 IN DNSKEY 257 3 5 BQEAAAABu13HdYlS35tf+wtpDlwkfPhz9sCqYHMPUDXfNUt8ePPrBPQx ZvZIx7tere9mX3u1tC8Ooxr5IMQa7D2yn2ZfomVk9rF+7Rtxtlu9LmNS DcqCa7JwrJyhg3eDyQ/+2fOwb+XhVEsjoMFY09DglZSWHroKOieFw4X1 sZLvmmXczYv2yzd/uP5xIxxofh++vfQ4505oYlkymLehWXfT1lqqpszH 9d/A7GHGmgdS8uyXq5LJC+PPJjdndcas4DH/Ja24NrIvzzX8ZXNimO13 +YMnKQdDSxS3yQWztSVgcY2GwRLWM9fiCX+e351OnIhYE+FjhHdg6M71 6Jf8ZDGoBO5Qrn3HMejItFBekBo9Rf2ZYzukSbu06CfFBpX/HQuAOYfp 2/7D56cG8SRH2d0sF3KAygSwAs3XvDv/dXcKMMqKftw5nxvv50o9OOUH gIR9kGVAax90oz1ZgtygQMMTHe2QuAaLwqso19Y2jb3qHIvyi+N94rwQ DzUrnMR3RFbL8P4XF4yzrYIEXkx6U9X8myHYQxbHdZ3N4rBoBvjjACX1 Vpl7bdDnKC/bITW34xpmNRZl+3K80zx5r0t9O9Csdylgach0CCNsu1I9 ERHYk/rEdzvSOiwSDYpMB3MlgYARjjWfx8YfSp1QV4fwo3i6ZZ3yFtlY Kcw23zD5Qe/YtLQ5H+8= ;; AUTHORITY SECTION: . 72000 IN NS a.dnssec-root.iks-jena.de. . 72000 IN NS a.dnssec.thur.de. . 72000 IN NS b.dnssec-root.iks-jena.de. > Where can we get and test it? Simply do it. Documentation can be found on my companies website. Please search yourself. I'll not promote it. > > It's technically and > >operationally possible. AtLarge can show, that ICANN is able to handle the > >political issues (at least for the Cairo meeting) too. > > I am sure ALAC can handle it. > ICANN if I am correct has announced its intent to do it two years ago > in its strategic plan and has not moved upon it. My concern is that > the first thing the USG people will do will be to sign the root they > will use. They do not need ICANN for that. Then what shall Europe > and China do? That's FUD, too. The root zone is signed by IANA. I'll see this version procutive on the meeting in Cairo. That's all. > Additional remarks on the @large, ALAC + Europe + users aspects : > > 1) on the Unbound mailing list: (the DNS software by NLnet Labs, > sponsored by Nominet and Verisign): That's FUD. NLNetlab is not sponsored by Nominet nor Verisign. NLNetlab produces the leading DNSSEC software and testbeds. > "the U.S. has been dragging its > feet, but will now encourage itself and others to get on board. This > is a great opportunity for DNSSEC-by-design Unbound, which appears to > both work well as a DNSSEC resolver AND is leading the pack with > important new security features (e.g. scrubbers), that both > enterprise and users are beginning to value". IMHO this is something > we need to evaluate, confirm, document in layman words, etc. in the > best interest of the European publics and entreprises. I do not see any need for your request. US gouvnerment urges their suborgs to sign their zones. That's great. That's all. Brasil had done this two years earlier. > 2) I went on the http://DNSSEC.org to see if there is something user > oriented. I tried to the "How-to". The first sentence is "This part > deals with securing data in zone les. We describe how to generate and > manage keys, how to set up a recursive name server to validate signed > zone data and how to sign and serve zones." Hardly something people > can understand the meaning at first glance. I voluteered to provide a DNSSEC track for the summit. User oriented material has to produced for this event. Currently the documentation is most readable in the RFCs. The websites out there are wracky. > 3) from your knowledge of the DNSSEC, what is the current pertinence > of RFC 3833? Would it be interesting to update it and present it in a > more readable/practical way to users ? This RFC is obsoleted. Time has moved on.

4 6

Re: [EURO-Discuss] Short bio for the election of the Euralo representatives to the ALAC
by Lutz Donnerhacke Aug. 31, 2008

Aug. 31, 2008

On Thu, Aug 28, 2008 at 05:22:17PM +0200, JFC Morfin wrote: > I think we would be really interested to know your opinion on @large > oriented whys, cons and pros of DNSSEC vs. other possibilities. DNSSEC introduces a public key infrastructure. There is a lot of FUD around, but a working DNSSEC provides decentral certification services for free. DNS is capable to hold SSL certificates as well as S/MIME and openPGP keys. That's the main reason for opposing DNSSEC from some industry heavily involved into certification business: They fear to lose their business. This way DNSSEC offers freedom of obtaining certificates in their self managed (sub)domains. Of course, classical certificates are able to check more than holding the domain. They are necessary to build legal reationships for business contracts. Thats why they check that the owner of the certificate is the right one regardless of the current DNS state (which might be under attack). But for most cases, the difference will not relevant for the private user. > where could we find an @large readable documentation on DNSSEC, its > governance needs, etc. Should it be operated under ICANN or as an IGF > enhanced cooperation (I understand that ICANN planned to catalyse a > DNSSEC dedicated structure gathering the TLD Managers?). > Should ALAC not be a partner into it? Of course, that's why I voluteer for a DNSSEC track on the AtLarge summit in Cairo. Preparing this track requires to collect and write such materials.

3 6

Re: [EURO-Discuss] REMINDER: 5 September 1300 UTC: Board Liaison Candidates Presentation
by Annette Muehlberg Aug. 31, 2008

Aug. 31, 2008

I am in a similar situation. At that time, I am on a panel on public goods and it-infrustructure ;-) best annette > -----Ursprüngliche Nachricht----- > Von: "Lutz Donnerhacke" <lutz(a)thur.de> > Gesendet: 29.08.08 18:48:19 > An: Discussion for At-Large Europe <euro-discuss(a)atlarge-lists.icann.org> > CC: "apac-discuss(a)atlarge-lists.icann.org" <apac-discuss(a)atlarge-lists.icann.org>, "alac-announce(a)atlarge-lists.icann.org" <alac-announce(a)atlarge-lists.icann.org> > Betreff: Re: [EURO-Discuss] REMINDER: 5 September 1300 UTC: Board Liaison Candidates Presentation > On Fri, Aug 29, 2008 at 05:54:29PM +0200, At-Large Staff wrote: > > We would like to remind about the presentation of the ALAC Board Liaison > > candidates next Friday 5 September from 1300 UTC until 1400 UTC. Please find > > This overlaps with the IGF (icann-studienkreis) meeting in Helsinki. > I'll not be able to take part, because I'm on a panel during this time. > > _______________________________________________ > EURO-Discuss mailing list > EURO-Discuss(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/euro-discuss_atlarge-lists.… > > Homepage for the region: http://www.euralo.org > --

2 1