June 2015 - gtld-tech - lists.icann.org

Publishing of the Change Poll EPP Extension IETF Draft
by Gould, James July 7, 2015

July 7, 2015

The first draft of the Change Poll EPP Extension ( http://tools.ietf.org/html/draft-gould-change-poll-00 ) has been submitted to the IETF. I co-authored this draft with Trung Tran from Neustar to provide a mechanism within EPP to notify clients of any server-side change, including but not limited to regular batch processes, customer support actions, Uniform Domain-Name Dispute-Resolution Policy (UDRP) or Uniform Rapid Suspension (URS) actions, court directed actions, and bulk updates based on customer requests. Since the client is not directly involved or knowledgable of these operations, the extension is used along with an EPP object mapping to provide the resulting state of the post-operation object, and optionally a pre-operation object, with the operation meta-data of what, when, who, and why. We would like this draft to be included in a re-charting of the EPPEXT Working Group. Please review the draft and provide any feedback. Thanks, — JG [cid:77031CC3-BE7A-4188-A95F-D23115A30A4D@vcorp.ad.vrsn.com] James Gould Distinguished Engineer jgould(a)Verisign.com 703-948-3271 12061 Bluemont Way Reston, VA 20190 VerisignInc.com<http://VerisignInc.com> “This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed, and may contain information that is non-public, proprietary, privileged, confidential and exempt from disclosure under applicable law or may be constituted as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this message in error, notify sender immediately and delete this message immediately.”

2 2

Re: [gtld-tech] TMCH - Service not available
by Michele Neylon - Blacknight July 1, 2015

July 1, 2015

Is this impacting the EPP service? Or is it just the web service? -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains http://www.blacknight.host/ http://blog.blacknight.com/ http://www.blacknight.press - get our latest news & media coverage http://www.technology.ie Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Social: http://mneylon.social Random Stuff: http://www.michele.irish/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,Ireland Company No.: 370845 On 29/06/2015 08:34, "gtld-tech-bounces(a)icann.org on behalf of Alexander Mayrhofer" <gtld-tech-bounces(a)icann.org on behalf of alexander.mayrhofer(a)nic.at> wrote: >Guys, > >while it seems that the certificate configuration looks sane now, the whole TMCH service (again) seems to be down again: > >https://ry.marksdb.org/ > >"This service of the Trademark Clearinghouse Database (TMDB) web client is currently not available. >Please try again later. Our apologies for the inconvenience." > >Please. Fix. This. > >Alex >

6 6

TMCH - Service not available
by Alexander Mayrhofer June 29, 2015

June 29, 2015

Guys, while it seems that the certificate configuration looks sane now, the whole TMCH service (again) seems to be down again: https://ry.marksdb.org/ "This service of the Trademark Clearinghouse Database (TMDB) web client is currently not available. Please try again later. Our apologies for the inconvenience." Please. Fix. This. Alex

1 0

Fw: TMCH: HIGHLY Insecure SSL config / certificates.
by Luc Van Steen1 June 26, 2015

June 26, 2015

All, We are currently working on this issue and you will be informed once the changes have been performed. Regards, Luc Van Steen IT Specialist Phone: 32-2-339-8377 | Mobile: 32-486-259819 E-mail: luc.van.steen(a)be.ibm.com International Business Machines of Belgium sprl / bvba Siège social / Maatschappelijke zetel: Avenue du Bourget 42 Bourgetlaan, B-1130 Bruxelles/Brussel N° d'entreprise / Ondernemingsnr: TVA / BTW BE 0405 912 336 RPM Bruxelles / RPR Brussel ----- Forwarded by Wim Fabri/Belgium/IBM on 26/06/2015 10:28 ----- From: Alexander Mayrhofer <alexander.mayrhofer(a)nic.at> To: "gtld-tech(a)icann.org" <gtld-tech(a)icann.org> Date: 26/06/2015 10:14 Subject: [gtld-tech] TMCH: HIGHLY Insecure SSL config / certificates. Sent by: gtld-tech-bounces(a)icann.org All, it seems like the TMCH has rolled out a new certificate on the various marksdb.org interfaces. Besides the fact that the certificate now uses an intermediate cert that was not delivered with the chain (and hence made our TLS connect fail initially), we took a look at the general TLS configuration of the interfaces, and it seems that the TLS configuration is HIGHLY insecure at the moment: https://www.ssllabs.com/ssltest/analyze.html?d=ry.marksdb.org (see "Protocol Details") Could someone from the TMCH indicate whether they are working on fixing these serious issues? Thanks, Alex Tenzij hierboven anders aangegeven: / Sauf indication contraire ci-dessus: / Unless otherwise stated above: International Business Machines of Belgium sprl / bvba Siège social / Maatschappelijke zetel: Avenue du Bourget 42 Bourgetlaan, B-1130 Bruxelles/Brussel N° d'entreprise / Ondernemingsnr: TVA / BTW BE 0405 912 336 RPM Bruxelles / RPR Brussel

1 0

TMCH: HIGHLY Insecure SSL config / certificates.
by Alexander Mayrhofer June 26, 2015

June 26, 2015

All, it seems like the TMCH has rolled out a new certificate on the various marksdb.org interfaces. Besides the fact that the certificate now uses an intermediate cert that was not delivered with the chain (and hence made our TLS connect fail initially), we took a look at the general TLS configuration of the interfaces, and it seems that the TLS configuration is HIGHLY insecure at the moment: https://www.ssllabs.com/ssltest/analyze.html?d=ry.marksdb.org (see "Protocol Details") Could someone from the TMCH indicate whether they are working on fixing these serious issues? Thanks, Alex

4 4

Almost Final Agenda for TechDay at ICANN53 Buenos Aires
by Dr Eberhard Lisse June 11, 2015

June 11, 2015

Please find enclosed the almost final agenda for the coming TechDay. Unless we get a short notice cancellation the topics are final, but the order and time slots my change somewhat if scheduling conflicts need to be resolved. Please take note again, that we are going to have a PGP/GPG Key Signing Event at TechDay. We have secured additional meeting space for short ceremonies for individuals who can't make it to the main ceremony during lunchtime of Tuesday, Wednesday and Thursday. A short introduction is on: http://en.wikipedia.org/wiki/Key_signing_party We have created a keyring on the website created to assist with such events http://biglumber.com/x/web?keyring=2592 If you wish to have your key signed, you you *MUST* paste an ASCII-armored file containing the key(s) you wish to add to the keyring into the provided text area. In my case I first looked at what keys I actually have: gpg --list-keys el(a)lisse.NA which showed: pub 1024R/A6490CB9 1995-09-07 [revoked: 2015-02-13] [...] pub 4096R/79453FAB 2015-02-08 uid Dr Eberhard W Lisse <el(a)lisse.na> uid Dr Eberhard W Lisse <doc(a)lisse.na> uid [jpeg image of size 14847] [...] and then used gpg --export -a 79453FAB to generate the ASCII-armored file (of the non-revoked key) which I uploaded and is now visible on the site, and which is used to sign this email. greetings, el

1 0

PGP/GPG Key Signing Ceremony at TechDay in Buenos Aires
by Dr Eberhard W Lisse June 2, 2015

June 2, 2015

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Colleagues, please take note again, that we are going to have a Key Signing Ceremony at TechDay in Buenos Aires (ie on Monday). We have secured additional meeting space for short ceremonies for individuals who can't make it to the main ceremony (see at the end of this mail). A short introduction is on: http://en.wikipedia.org/wiki/Key_signing_party We have created a keyring on the website created to assist with such events http://biglumber.com/x/web?keyring=2592 If you wish to have your key signed, you you *MUST* paste an ASCII-armored file containing the key(s) you wish to add to the keyring into the provided text area. In my case I first looked at what keys I actually have: gpg --list-keys el(a)lisse.NA which showed: pub 1024R/A6490CB9 1995-09-07 [revoked: 2015-02-13] [...] pub 4096R/79453FAB 2015-02-08 uid Dr Eberhard W Lisse <el(a)lisse.na> uid Dr Eberhard W Lisse <doc(a)lisse.na> uid [jpeg image of size 14847] [...] and then used gpg --export -a 79453FAB to generate the ASCII-armored file (of the non-revoked key) which I uploaded and is now visible on the site, and which is used to sign this email. greetings, el On 2015-06-02 07:35 , Kristina Nordstrom wrote: [...] > Tuesday 23 June 12:45-14:00 ART > > Informal Tech Working Group Meeting (CLOSED); Retiro A > > > Wednesday 24 June 13:00-14:00 ART > > Informal Tech Working Group Meeting (CLOSED); Retiro A > > > Thursday 25 June 12:00-13:00 ART > > Informal Tech Working Group Meeting (CLOSED); Retiro C [...] -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIVAwUBVW1wyJcFHaN5RT+rAQIhrRAArFsFbeeOJGA0jHIMDZbEdP8Q7z3w8vKf pDCIHPih0jg9XMSGf3Awb6y6rMM1SosvV/VD8YehJ3II1azkPM43ApEyqSIDztIX k6G1fQtZNNA6Z8PNZ9vgvXYz+wvIxV8BviH/FZKWc3uduRLhPxR8nhYyZlncyuKj NNGZQQvHytFdxn/LUFmIZp2lvML63A+S6iTGfZ9AK5b7U8BrPuSzfJpbF4iqO/oA WKV77jF+/ceezZbweR1t47Vlm11Rp3t6nEzQwbItyzk3xKfM+v3CqeHMDyY0u2q3 A+DC7rUPojXzRcYRfJDZ7U0Z4zc/6bXsoAUIK2R/5QdJ9eZCd5InZG0N5YjYJTMu eW6U2ga4eK1YgXP73xDNpwIXNPEYpP+0qO4y7gmb8jjEyyqnhWGLuJqkhv4ndyCe ABRbJY6zwcac0hlQWUhQ7b3vcyvZmdNLxqfLclBKOZZVYKKQrF0FYB+3W2ctcM/n Ewo64+8o0YswHinLplVGstFeONSRgOdz3aKmrnga99fRRDe+Vk2rU0zxg3bPnINW L1BDlGsrBsOEJ8OyzziPQzI/w8hFtr6bPpfD9D1m0V58uqvh0AMXhRYa2vDzoBwX GdqRzu2oIPPGvT0M5meqiV6oDBuXN5WMsGjApWmju4MybGJZzS4U16OIq4HHTWGY PffRaUHbAYw= =5teR -----END PGP SIGNATURE-----

1 0