Hi Robert,
On 9 Oct 2024, at 03:27, Robert Story via rssac-caucus <rssac-caucus@icann.org> wrote:
David's reference to golden addresses was and idea he had in 2008, and has not been proposed in the Changing RSO addresses document. What has been proposed is that RSO service address should be 'special'. The idea being to prevent a Former Service Address (as defined in the document) that has been returned to a RIR from being reallocated to someone other than an RSO.
While not (yet) written up in the document, I think the guidance for a Former Service Address should be something along the lines of this ordered list:
- continue providing DNS root service on the address - maintain ownership/control of the address (whether it's 'dark' or reused for some other service) - transfer the prefix to another RSO - and as a last resort, return the address to the RIR
There is also a proposal to recommend that RSOs requesting a new prefix for root service should request an allocation from the critical infrastructure pool, should the RIR have such a pool. The idea being that critical infrastructure addresses, when returned, are less likely to end up in nefarious hands.
There is also a proposal to recommend that 'someone' should bring policy proposals to each of the RIRs to have returned prefixes that have been used for root service placed in a special pool and only re-assigned to another RSO for root service. Kind of like a subset of a critical infrastructure pool.
This is currently a fairly contentious issue on the calls, which I why I'm trying to drum up discussion on the list.
Regards, Robert
USC Information Sciences Institute <http://www.isi.edu/> Networking and Cybersecurity Division _______________________________________________ rssac-caucus mailing list -- rssac-caucus@icann.org To unsubscribe send an email to rssac-caucus-leave@icann.org
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.