[governance] FW: [Futurework] Possible risk from Internet changes

Eric Dierker cogitoergosum at sbcglobal.net
Tue May 4 21:46:31 EDT 2010


Does this mean I have to give back all my survivalist and camo stuff?  Does Ebay handle used tanks? Perhaps I should ask California's next gov. Meg Whitman - ex CEO.

--- On Tue, 5/4/10, McTim <dogwallah at gmail.com> wrote:


From: McTim <dogwallah at gmail.com>
Subject: Re: [governance] FW: [Futurework] Possible risk from Internet changes
To: governance at lists.cpsr.org, "michael gurstein" <gurstein at gmail.com>
Date: Tuesday, May 4, 2010, 5:32 AM


All,

12 of the 13 rootservers are now serving the DURZ, so if things are
working now they will almost certainly still be working on 5/5.
The sky is not falling!

On Mon, May 3, 2010 at 8:15 PM, michael gurstein <gurstein at gmail.com> wrote:
> I have no idea about this... But I think this raises some interesting
> questions from an "Internet governance" perspective such as what types of
> alerts should be distributed

This is the text of the 5th alert that has gone out about this, I've
gotten it in ~half a dozen lists I am subbed to:

"Root Zone DNSSEC Deployment
Technical Status Update 2010-05-03

This is the fifth of a series of technical status updates intended
to inform a technical audience on progress in signing the root zone
of the DNS.


**  The final transition to the DURZ will take place on
**  J-Root, on 2010-05-05 between 1700--1900 UTC.
**
**  After that maintenance all root servers will be serving the
**  DURZ, and will generate larger responses to DNS
**  queries that request DNSSEC information.
**
**  If you experience technical problems or need to contact
**  technical project staff, please send e-mail to rootsign at icann.org
**  or call the ICANN DNS NOC at +1 310 301 5817, e-mail preferred
**  if possible.
**
**  See below for more details.


RESOURCES

Details of the project, including documentation published to date,
can be found at <http://www.root-dnssec.org/>.

We'd like to hear from you. If you have feedback for us, please
send it to rootsign at icann.org.


DEPLOYMENT STATUS

The incremental deployment of DNSSEC in the Root Zone is being
carried out first by serving a Deliberately Unvalidatable Root Zone
(DURZ), and subsequently by a conventionally signed root zone.
Discussion of the approach can be found in the document "DNSSEC
Deployment for the Root Zone", as well as in the technical presentations
delivered at RIPE, NANOG, IETF and ICANN meetings.

Twelve of the thirteen root servers have already made the transition
to the DURZ.  No harmful effects have been identified.

The final root server to make the transition, J-Root, will start
serving the DURZ in a maintenance window scheduled for 1700--1900
UTC on 2010-05-05.

Initial observations relating to this transition will be presented
and discussed at the DNS Working Group meeting at the RIPE meeting
in Prague on 2010-05-06.


PLANNED DEPLOYMENT SCHEDULE

Already completed:

2010-01-27: L starts to serve DURZ

2010-02-10: A starts to serve DURZ

2010-03-03: M, I start to serve DURZ

2010-03-24: D, K, E start to serve DURZ

2010-04-14: B, H, C, G, F start to serve DURZ

To come:

2010-05-05: J starts to serve DURZ

2010-07-01: Distribution of validatable, production, signed root
   zone; publication of root zone trust anchor

(Please note that this schedule is tentative and subject to change
based on testing results or other unforeseen factors.)

A more detailed DURZ transition timetable with maintenance windows
can be found in the document "DNSSEC Deployment for the Root Zone",
the most recent draft of which can be found on the project web page
at <http://www.root-dnssec.org/>."




>, who should identify what alerts are
> distributed and to whom i.e. where does the authority, responsibility and
> accountability lie in these areas and is this sufficient and appropriate?


The ICANN DNSSEC signing team is the "who".  ICANN and VeriSign have
the authority, responsibility and accountability.

I think it is sufficient and appropriate.  Who would you suggest do it?


-- 
Cheers,

McTim
"A name indicates what we seek. An address indicates where it is. A
route indicates how we get there."  Jon Postel
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.cpsr.org
To be removed from the list, send any message to:
     governance-unsubscribe at lists.cpsr.org

For all list information and functions, see:
     http://lists.cpsr.org/lists/info/governance

Translate this email: http://translate.google.com/translate_t
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.igcaucus.org/pipermail/governance/attachments/20100504/060c62b6/attachment.htm>
-------------- next part --------------
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.cpsr.org
To be removed from the list, send any message to:
     governance-unsubscribe at lists.cpsr.org

For all list information and functions, see:
     http://lists.cpsr.org/lists/info/governance

Translate this email: http://translate.google.com/translate_t


More information about the Governance mailing list