Forgery Resilience Phase #2 Ólafur Guðmundsson

Slides:



Advertisements
Similar presentations
Olaf M. Kolkman. APNIC, 6 February 2014, Bangkok. DNSSEC and in-addr an update Olaf M. Kolkman
Advertisements

State of DNS Security Extensions Edward Lewis February 26, 2001 APRICOT 2001 Panel.
IETF-751 Olafur Gudmundsson Andrew Sullivan.
1 Secure DNS Solutions Rooster. 2 Introduction What does security mean for DNS? What security problems exist for DNS, what is being done about them, and.
Detecting Network Attachment IETF61 Chairs: Pekka Nikander, Greg Daley.
Ogud at ogud dot com DNS implementations guide Ólafur Guðmundsson DNSEXT chair
XCON Working Group IETF 61 Washington, DC. The Normal Stuff NOTE WELL statement Minute Taker Jabber Scribe Blue Sheets.
SIP working group status Keith Drage, Dean Willis.
Testing. Definition From the dictionary- the means by which the presence, quality, or genuineness of anything is determined; a means of trial. For software.
Software Testing. Introduction Testing is often left to the end of the project which is generally not a good idea. Testing should be conducted throughout.
1 Software Construction Software Construction Chapter 1.
Transaction Processing Systems and System Development Life Cycle
Security for the Internet’s Domain Name System DNSSEC Current State of Deployment Prepared for Internet2 BoF Amy Friedlander, Shinkuro, Inc. Based on a.
DNSEXT-63 Next steps in Trust Anchor Management for DNSSEC Ólafur Guðmundsson
EGEE is a project funded by the European Union under contract IST Testing processes Leanne Guy Testing activity manager JRA1 All hands meeting,
Networks big switch Hard Problems in SDN Rob Sherwood SDNRG – Atlanta, November 2012.
July 27, 2009IETF NEA Meeting1 NEA Working Group IETF 75 Co-chairs: Steve Hanna
TEXAS NODAL Board of Directors Austin, Texas July 15, 2003.
1 ESnet DNSSEC Update ESCC/Internet2 Joint Techs Workshop February 14, 2007 R. Kevin Oberman Network Engineer Lawrence Berkeley National Laboratory.
Addressing Issues David Conrad Internet Software Consortium.
Debugging Strategies from Software Carpentry. Agan's Rules Many people make debugging harder than it needs to be by: Using inadequate tools Not going.
This is the DNSEXT Working Group (where the microphones are at Scandic hights) San Diego IETF60
DNS Discovery Discussion Report Draft-ietf-ipngwg-dns-discovery-01.txt.
WG Document Status 192nd IETF TEAS Working Group.
Goals for Presentation Explain the basics of software development methodologies Explain basic XP elements Show the structure of an XP project Give a few.
The 9 steps to successful project implementation From BD to Operations.
COMP3121 E-Commerce Technologies Richard Henson University of Worcester December 2011.
Program #2 Algorithm for Parking at PSU. Understanding the Assignment You will be writing a program to find out how much someone at PSU might be spending.
IETF-90 (Toronto) DHC WG Meeting Wednesday, July 23, GMT IETF-90 DHC WG1 Last Updated: 07/21/ :10 EDT.
1 Yet Another Mail Working Group IETF 78 July 29, 2010.
Mobile IPv4 Agenda Henrik Levkowetz & Pete McCann, chairs March 1, 2004.
DNSSEC allocations DNSEXT chairs IETF-75 Stockholm 2009/07/29.
File: /ram/wgchairs.sxi Date: 7 January, 2016 Slide 1 Process and Tools (PROTO) Team General Area Meeting IETF59, Seoul, Korea -- March 2004
Software Project Management Iterative Model & Spiral Model.
COMP3241 E-Commerce Technologies Richard Henson University of Worcester December 2014.
1 Brian Hartvigsen Manager, Site Reliability Engineering Real World Impacts of EDNS Client Subnet.
NSIS WG Meeting IETF 66 Montreal John Loughney (chair)
DNSEXT at IETF-83 Paris 2012/3/27 at 17:10 – 18:10 Ólafur Guðmundsson Andrew Sullivan.
Accounting in DataGrid HLR software demo Andrea Guarise Milano, September 11, 2001.
2007/07/23IETF69 enum-combined1 draft-ietf-enum- combined IETF69 Otmar Lendl Michael Haberler Richard Stastny.
IETF-89 (London) DHC WG Meeting Monday, March 3, GMT IETF-89 DHC WG1 Last Updated: 02/27/ EST.
1 Content-Aware Device Benchmarking Methodology (draft-hamilton-bmwg-ca-bench-meth-05) BMWG Meeting IETF-79 Beijing November 2010 Mike Hamilton
APNIC DNSSEC deployment considerations APNIC 23, Bali George Michaelson R&D Officer APNIC.
68th IETF, Prague, March 2007 Requirements for Manageability Sections in PCE Working Group Drafts draft-ietf-pce-manageability-requirements-01.txt Adrian.
When you begin taking notes for your research paper, you will create two types of index cards: o source cards o note cards.
Topic:- At the end we will be able to explain:- Why it is called Meta Model ?? Spiral Model Its Advantages & Disadvantages… Phases of Spiral Model...
05 October 2010 HMA-FO Task 2: Feasibility Analysis Service HMA Follow On Activities Task 2: Feasibility Analysis Service (Sensor Planning Service) Monthly.
Re-alignment of Responsibility Shift from Jan to Tony.
San Diego, November 2006 IETF 67 th – mip6 WG Goals for AAA-HA interface (draft-ietf-mip6-aaa-ha-goals-03) Gerardo Giaretta Ivano Guardini Elena Demaria.
Clinical Decision Support Implementation Victoria Ferguson, COO - Program Manager Christopher Taylor, CIO – Business Owner Monica Kaileh, CMIO – Steering.
Submission doc.: IEEE r1 March 2012 Dan Harkins, Aruba NetworksSlide 1 The Pitfalls of Hacking and Grafting Date: Authors:
IETF 79, Beijing China FECFrame WG Meeting Thurs, November 10, , Jade 1.
Who am I? ● Michael Richardson ● ● ● Director, Consumer Desktop Desktop Development – working on an ubuntu-based* virtual.
[lafur Guxmundsson DNSEXT co-chair
Discussion 11 Final Project / Git.
Faster Data Structures in Transactional Memory using Three Paths
IETF 86 Orlando MBONED.
CAPWAP Working Group IETF 66 Montreal
Some Important Techniques For Regression Testing That You Must Know.
The 9 steps to successful project implementation
K-Means Clustering Who is my neighbor?.
Tuesday , 9:30-12:00 Morning session I, Buckingham
ECN Experimentation draft-black-ecn-experimentation
GeneRic Autonomic Signaling Protocol draft-ietf-anima-grasp-08
IETF DNSOP WG Update – and some DPRIVE
IETF 103 Bangkok, Thailand - November 2018
IETF 103 pim wg meeting.
Distributed Mobility Management Working Group
IETF-104 (Prague) DHC WG Next steps
LEARNING & DEVELOPMENT STRATEGY: PROCESS OVERVIEW
Presentation transcript:

Forgery Resilience Phase #2 Ólafur Guðmundsson

What is coming How can an avalanche be stopped ? - Build fences - Run away - Ski faster - Pray - “Let it be!” - Deploy DNSSEC

Forgery-resilience-07 Passed WGLC will be sent to IESG next week. Expect RFC in about 4 months Deploy NOW !!!

Ideas? There are lots of them: – droppers.2008/msg01131.htmlhttp:// droppers.2008/msg01131.html –X20 –QID –……

What else to do? Questions for people to think about: –What can be done in the short term ? –What can be done without updating software? –What can be done in the medium term ? –What work does DNSEXT or DNSOP need to do ?

DNS protocol economics 101 All changes have a “cost” –How high the cost is for Implementations Deployment if there are changes in operation Authorative DNS data providers DNS consumer i.e. resolvers Is there fall-back –When can this be deployed Standards action needed: add 8-24 months Code (add 1-24 months) Testing (add 1-12 months) Rollout (add 2-18 months) Fixes needed (add 1-24 months)

The plan The chairs will not propose a plan or officially adopt new work until the full details of the current scare are known.