[Ssr2-review] Emergency Changes in the Root Zone Database

[Russ Housley]

Okay.  Let's focus on those two things, being clear that even automated email accounts should be signed.

Russ


> On Nov 5, 2019, at 3:49 PM, Boban Krsic <krsic at denic.de> wrote:
> 
> Hi Russ, all,
> 
> On 05.11.19 18:42, Russ Housley wrote:
> 
>> Given this information, and the fact that every email that I recieve from anyone at iana.org <http://iana.org/> already has an S/MIME signature, I think we should drop the IANA portal recommendation altogether.
> 
> Maybe only for personal accounts? I have a mail from the Root Zone
> Management (rzm at iana.org) in my inbox. The mail contains a URL to
> confirm a change we initiated at IANA - in plain text. A signature
> (S/MIME or PGP) is also not available at the message.
> 
> I would also like to distinguish mail communication from Root Zone
> Management portal (https://rzm.iana.org/rzm/login). The portal should
> have a recommendation regarding a strong authentication procedure
> (currently username and password).
> 
> 
> 	- Boban.
> 
> _______________________________________________
> Ssr2-review mailing list
> Ssr2-review at icann.org
> https://mm.icann.org/mailman/listinfo/ssr2-review
> 
> _______________________________________________
> By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 235 bytes
Desc: Message signed with OpenPGP
URL: <http://mm.icann.org/pipermail/ssr2-review/attachments/20191105/56aab726/signature-0001.asc>