[gtld-tech] Delegated nameservers RFC compliance
Mark Andrews
marka at isc.org
Thu Sep 1 01:44:42 UTC 2016
Thanks.
Raw data for the tlds can be found here
https://ednscomp.isc.org/compliance/tld-fullreport.txt
and yes this has vastly improved on what it was a year ago. If a
test doesn't have "=ok" after it then a issue was detected. This
is regenerated daily.
The tests in draft-ietf-dnsop-no-response-issue-04 are not exhaustive.
They cover likely and known interop issues when extending the DNS.
* adding new types
* adding new opcodes
* adding new DNS flags
* adding new EDNS options
* adding new EDNS flags
* adding new EDNS version
These events have, with the exception of a EDNS version bump, all
happened in the past. Servers should all handle them properly.
Resolvers have had to try and workaround the non compliance and the
more features that are in use the harder it becomes. Checks and
balances need to be restored.
The bigger question is how to deal with the level further down.
Every server that is delegated to should, in theory, be RFC compliant.
Lots of them don't even meet RFC 1034. Even more mishandle EDNS.
draft-ietf-dnsop-no-response-issue-04 has some suggestions on how to
proceed.
Mark
In message <D3ECC92A.11C72B%gustavo.lozano at icann.org>, Gustavo Lozano writes:
>
> Mark, colleagues,
>
> A quick update regarding the state of the nameservers in the gTLD space, I
> have been monitoring the nameservers of the gTLDs, and across time between
> 99.9% and 100% nameservers do not present any of the EDNS issues described
> in https://tools.ietf.org/html/draft-ietf-dnsop-no-response-issue-04.
> Registries have solved the issues reported by ICANN in a timely manner.
>
> Finally, a handful of name servers are copying the Z flag bit from the query
> header (see 8.1.3.3 of draft-ietf-dnsop-no-response-issue-04) and this is
> related to a bug that has now been fixed now in Knot (see.
> https://gitlab.labs.nic.cz/labs/knot/issues/476). We expect that in the
> near future the MBZ issue should be solved in the gTLD space as Registries
> roll out the new version.
>
>
> Regards,
> Gustavo
>
>
> On 7/26/16, 15:59, "Gustavo Lozano" <gustavo.lozano at icann.org> wrote:
>
> > Thank you Mark,
> >
> > In the past we worked with a few gTLD backends to solve these issues. I
> > think that the massive improvement that you mentioned is related to this
> > effort. I will review your latest report and work with the affected gTLD
> > backends to solve any new issue.
> >
> > Regards,
> >
> > Gustavo Lozano
> > ICANN
> >
> > On 7/25/16, 21:01, "gtld-tech-bounces at icann.org on behalf of Mark Andrews"
> > <gtld-tech-bounces at icann.org on behalf of marka at isc.org> wrote:
> >
> >>
> >> In message <0EDF3BC2-6E1E-4A2B-B264-3972B5E994B2 at icann.org>, Francisco
> >> Arias writes:
> >>> Hi Mark,
> >>>
> >>> Are you suggesting there is an issue with TLD servers or second-level
> >>> names, or both?
> >>
> >> There are issues with both though the TLD servers have show a massive
> >> improvement [1] and the GTLD subset are supposed to be RFC compliant
> >> with DNSSEC, EDNS(0) and STD 13 as per their contracts. The root
> >> servers also need to meet the same level of compliance.
> >>
> >> [2] shows that most of the TLD and root servers are basically
> >> compliant. The tests used are described in [3].
> >>
> >> The second level names are a entirely different matter with only
> >> ~60% [1] of servers actually passing just the EDNS(0) subset of the
> >> tests above.
> >>
> >> Everytime new features (EDNS, DNSSEC, DNS COOKIES, AD=1 in queries)
> >> have been deployed in the DNS resolver vendors have had to work
> >> around non compliant servers where possible or just live with the
> >> fact that you can't do reliable signaling because the broken servers
> >> were not removed from the ecosystem in a timely enough manner (AD
> >> is echoed back by too many servers despite this being explicting
> >> prohibited by STD13). This could have been avoided if nameservers
> >> were actually checked for protocol compliance and operators with
> >> non-compliant servers informed that their servers are broken.
> >>
> >> Some of this will improve as operators use F1 [4] load balancers
> >> and Checkpoint Firewalls upgrade (Unknown EDNS version and Unknown
> >> EDNS Flags will no longer cause the DNS message to be dropped based
> >> on correspondence with a Checkpoint developer.) This won't cover
> >> all cases of packets being dropped. Nor will it address the servers
> >> returning inappropriate responses.
> >>
> >> To be able to use the extensions mechanisms specified in EDNS(0)
> >> the deployed server need to be well behaved when they see a message
> >> using a extensions mechanisms. This is very much not the case
> >> today.
> >>
> >> Mark
> >>
> >> [1] https://ednscomp.isc.org/compliance/summary.html
> >> [2] https://ednscomp.isc.org/compliance/tld-fullreport.txt
> >> [3] https://tools.ietf.org/html/draft-ietf-dnsop-no-response-issue-03.
> >> [4]
> >> https://support.f5.com/kb/en-us/solutions/public/16000/200/sol16240.html
> >>
> >> Mark
> >>
> >>> Regards,
> >>>
> >>> --
> >>> Francisco
> >>> On 7/18/16, 2:07 PM, "gtld-tech-bounces at icann.org on behalf of Mark
> >>> Andrews" <gtld-tech-bounces at icann.org on behalf of marka at isc.org> wrote:
> >>>
> >>>
> >>> As part of preparations for shipping nameservers that support DNS
> >>> COOKIES (RFC 7873) I have been measuring EDNS Compliance in a number
> >>> data sets the results of which are available at
> >>> https://ednscomp.isc.org
> >>> along with a online tester. We wanted how much will break when we
> >>> ship BIND 9.11.0 which has DNS COOKIES on by default.
> >>>
> >>> We found there were zones that could no longer resolve if validation
> >>> was enabled. Named falls back to plain DNS on certain detected
> >>> errors as there isn't time to probe exact failure causes by trial
> >>> and error. Even if trial and error worked for DNS COOKIEs the
> >>> problem will get worse as more EDNS features get used.
> >>>
> >>> We found zones that were taking multiple seconds to resolve. We
> >>> were back to the sort of resolution times we saw when EDNS was first
> >>> introduced for some zones.
> >>>
> >>> We saw increased queries being needed to be made as servers didn't
> >>> correctly ignore unknown EDNS options.
> >>>
> >>> All these errors are easily determinable by running a handful of
> >>> queries against each server.
> >>>
> >>> RFC 1034 and RFC 1035 were written assuming that servers delegated
> >>> to would be RFC compliant. Currently GTLD servers are checked and
> >>> there is no reason that servers delegated to by the GTLD servers
> >>> can't also be checked and the operators asked to fix the faults
> >>> detected. This can be done at both the RFC 1034 and RFC 1035 level
> >>> and at the EDNS level. It is not a actionable condition if all the
> >>> EDNS tests fail in a way that indicated the EDNS is not supported.
> >>>
> >>> I would suggest that {E}DNS compliance checking be done within a
> >>> week of a new server being registered and delegated to and 1/2
> >>> yearly thereafter. If a server fails a test that the operator /
> >>> registrant be informed and the server be retested in a month. I
> >>> would also suggest that compliance testing results and test date
> >>> should be record in whois or similar so there is no need to retest
> >>> too frequently.
> >>>
> >>> Mark
> >>> --
> >>> Mark Andrews, ISC
> >>> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> >>> PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
> >>>
> >>>
> >>
> >> --
> >> Mark Andrews, ISC
> >> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> >> PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
> >
>
>
>
> --B_3555510884_5544002
> Content-type: text/html;
> charset="US-ASCII"
> Content-transfer-encoding: quoted-printable
>
> <html><head>
> <meta name=3D"Title" content=3D"">
> <meta name=3D"Keywords" content=3D"">
> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
> <meta name=3D"ProgId" content=3D"Word.Document">
> <meta name=3D"Generator" content=3D"Microsoft Word 14">
> <meta name=3D"Originator" content=3D"Microsoft Word 14">
> <link rel=3D"File-List" href=3D"file://localhost/Users/gustavolozano/Library/
> Ca=
> ches/TemporaryItems/msoclip/0/clip_filelist.xml">
> <!--[if gte mso 9]><xml>
> <o:DocumentProperties>
> <o:Revision>0</o:Revision>
> <o:TotalTime>0</o:TotalTime>
> <o:Pages>1</o:Pages>
> <o:Words>115</o:Words>
> <o:Characters>660</o:Characters>
> <o:Company>ICANN</o:Company>
> <o:Lines>5</o:Lines>
> <o:Paragraphs>1</o:Paragraphs>
> <o:CharactersWithSpaces>774</o:CharactersWithSpaces>
> <o:Version>14.0</o:Version>
> </o:DocumentProperties>
> <o:OfficeDocumentSettings>
> <o:AllowPNG/>
> </o:OfficeDocumentSettings>
> </xml><![endif]-->
> <link rel=3D"themeData" href=3D"file://localhost/Users/gustavolozano/Library/
> Ca=
> ches/TemporaryItems/msoclip/0/clip_themedata.xml">
> <!--[if gte mso 9]><xml>
> <w:WordDocument>
> <w:View>Normal</w:View>
> <w:Zoom>0</w:Zoom>
> <w:TrackMoves/>
> <w:TrackFormatting/>
> <w:PunctuationKerning/>
> <w:ValidateAgainstSchemas/>
> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
> <w:IgnoreMixedContent>false</w:IgnoreMixedContent>
> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
> <w:DoNotPromoteQF/>
> <w:LidThemeOther>EN-US</w:LidThemeOther>
> <w:LidThemeAsian>JA</w:LidThemeAsian>
> <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
> <w:Compatibility>
> <w:BreakWrappedTables/>
> <w:SnapToGridInCell/>
> <w:WrapTextWithPunct/>
> <w:UseAsianBreakRules/>
> <w:DontGrowAutofit/>
> <w:SplitPgBreakAndParaMark/>
> <w:EnableOpenTypeKerning/>
> <w:DontFlipMirrorIndents/>
> <w:OverrideTableStyleHps/>
> <w:UseFELayout/>
> </w:Compatibility>
> <m:mathPr>
> <m:mathFont m:val=3D"Cambria Math"/>
> <m:brkBin m:val=3D"before"/>
> <m:brkBinSub m:val=3D"--"/>
> <m:smallFrac m:val=3D"off"/>
> <m:dispDef/>
> <m:lMargin m:val=3D"0"/>
> <m:rMargin m:val=3D"0"/>
> <m:defJc m:val=3D"centerGroup"/>
> <m:wrapIndent m:val=3D"1440"/>
> <m:intLim m:val=3D"subSup"/>
> <m:naryLim m:val=3D"undOvr"/>
> </m:mathPr></w:WordDocument>
> </xml><![endif]--><!--[if gte mso 9]><xml>
> <w:LatentStyles DefLockedState=3D"false" DefUnhideWhenUsed=3D"true"
> DefSemiHidden=3D"true" DefQFormat=3D"false" DefPriority=3D"99"
> LatentStyleCount=3D"276">
> <w:LsdException Locked=3D"false" Priority=3D"0" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Normal"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"heading 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 7"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 8"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 9"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 7"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 8"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 9"/>
> <w:LsdException Locked=3D"false" Priority=3D"35" QFormat=3D"true" Name=3D"c
> aption=
> "/>
> <w:LsdException Locked=3D"false" Priority=3D"10" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Title"/>
> <w:LsdException Locked=3D"false" Priority=3D"1" Name=3D"Default Paragraph F
> ont"=
> />
> <w:LsdException Locked=3D"false" Priority=3D"11" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtitle"/>
> <w:LsdException Locked=3D"false" Priority=3D"22" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Strong"/>
> <w:LsdException Locked=3D"false" Priority=3D"20" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Emphasis"/>
> <w:LsdException Locked=3D"false" Priority=3D"59" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Table Grid"/>
> <w:LsdException Locked=3D"false" UnhideWhenUsed=3D"false" Name=3D"Placehold
> er T=
> ext"/>
> <w:LsdException Locked=3D"false" Priority=3D"1" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"No Spacing"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 1"/>
> <w:LsdException Locked=3D"false" UnhideWhenUsed=3D"false" Name=3D"Revision"
> />
> <w:LsdException Locked=3D"false" Priority=3D"34" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"List Paragraph"/>
> <w:LsdException Locked=3D"false" Priority=3D"29" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Quote"/>
> <w:LsdException Locked=3D"false" Priority=3D"30" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Quote"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"19" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtle Emphasis"/>
> <w:LsdException Locked=3D"false" Priority=3D"21" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Emphasis"/>
> <w:LsdException Locked=3D"false" Priority=3D"31" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtle Reference"/>
> <w:LsdException Locked=3D"false" Priority=3D"32" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Reference"/>
> <w:LsdException Locked=3D"false" Priority=3D"33" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Book Title"/>
> <w:LsdException Locked=3D"false" Priority=3D"37" Name=3D"Bibliography"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" QFormat=3D"true" Name=3D"T
> OC Hea=
> ding"/>
> </w:LatentStyles>
> </xml><![endif]-->
> <style>
> <!--
> /* Font Definitions */
> @font-face
> {font-family:"?? ??";
> mso-font-charset:78;
> mso-generic-font-family:auto;
> mso-font-pitch:variable;
> mso-font-signature:-536870145 1791491579 18 0 131231 0;}
> @font-face
> {font-family:"Cambria Math";
> panose-1:2 4 5 3 5 4 6 3 2 4;
> mso-font-charset:0;
> mso-generic-font-family:auto;
> mso-font-pitch:variable;
> mso-font-signature:-536870145 1107305727 0 0 415 0;}
> @font-face
> {font-family:Cambria;
> panose-1:2 4 5 3 5 4 6 3 2 4;
> mso-font-charset:0;
> mso-generic-font-family:auto;
> mso-font-pitch:variable;
> mso-font-signature:-536870145 1073743103 0 0 415 0;}
> /* Style Definitions */
> p.MsoNormal, li.MsoNormal, div.MsoNormal
> {mso-style-unhide:no;
> mso-style-qformat:yes;
> mso-style-parent:"";
> margin:0in;
> margin-bottom:.0001pt;
> mso-pagination:widow-orphan;
> font-size:12.0pt;
> font-family:Cambria;
> mso-ascii-font-family:Cambria;
> mso-ascii-theme-font:minor-latin;
> mso-fareast-font-family:"?? ??";
> mso-fareast-theme-font:minor-fareast;
> mso-hansi-font-family:Cambria;
> mso-hansi-theme-font:minor-latin;
> mso-bidi-font-family:"Times New Roman";
> mso-bidi-theme-font:minor-bidi;}
> .MsoChpDefault
> {mso-style-type:export-only;
> mso-default-props:yes;
> font-family:Cambria;
> mso-ascii-font-family:Cambria;
> mso-ascii-theme-font:minor-latin;
> mso-fareast-font-family:"?? ??";
> mso-fareast-theme-font:minor-fareast;
> mso-hansi-font-family:Cambria;
> mso-hansi-theme-font:minor-latin;
> mso-bidi-font-family:"Times New Roman";
> mso-bidi-theme-font:minor-bidi;}
> @page WordSection1
> {size:8.5in 11.0in;
> margin:1.0in 1.25in 1.0in 1.25in;
> mso-header-margin:.5in;
> mso-footer-margin:.5in;
> mso-paper-source:0;}
> div.WordSection1
> {page:WordSection1;}
> -->
> </style>
> <!--[if gte mso 10]>
> <style>
> /* Style Definitions */
> table.MsoNormalTable
> {mso-style-name:"Table Normal";
> mso-tstyle-rowband-size:0;
> mso-tstyle-colband-size:0;
> mso-style-noshow:yes;
> mso-style-priority:99;
> mso-style-parent:"";
> mso-padding-alt:0in 5.4pt 0in 5.4pt;
> mso-para-margin:0in;
> mso-para-margin-bottom:.0001pt;
> mso-pagination:widow-orphan;
> font-size:12.0pt;
> font-family:Cambria;
> mso-ascii-font-family:Cambria;
> mso-ascii-theme-font:minor-latin;
> mso-hansi-font-family:Cambria;
> mso-hansi-theme-font:minor-latin;}
> </style>
> <![endif]-->
> </head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webki
> =
> t-line-break: after-white-space; font-family: Calibri, sans-serif; font-size=
> : 14px; color: rgb(0, 0, 0);"><div><div>
>
>
>
>
>
>
> <!--[if gte mso 9]><xml>
> <o:DocumentProperties>
> <o:Revision>0</o:Revision>
> <o:TotalTime>0</o:TotalTime>
> <o:Pages>1</o:Pages>
> <o:Words>115</o:Words>
> <o:Characters>660</o:Characters>
> <o:Company>ICANN</o:Company>
> <o:Lines>5</o:Lines>
> <o:Paragraphs>1</o:Paragraphs>
> <o:CharactersWithSpaces>774</o:CharactersWithSpaces>
> <o:Version>14.0</o:Version>
> </o:DocumentProperties>
> <o:OfficeDocumentSettings>
> <o:AllowPNG/>
> </o:OfficeDocumentSettings>
> </xml><![endif]-->
>
> <!--[if gte mso 9]><xml>
> <w:WordDocument>
> <w:View>Normal</w:View>
> <w:Zoom>0</w:Zoom>
> <w:TrackMoves/>
> <w:TrackFormatting/>
> <w:PunctuationKerning/>
> <w:ValidateAgainstSchemas/>
> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
> <w:IgnoreMixedContent>false</w:IgnoreMixedContent>
> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
> <w:DoNotPromoteQF/>
> <w:LidThemeOther>EN-US</w:LidThemeOther>
> <w:LidThemeAsian>JA</w:LidThemeAsian>
> <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
> <w:Compatibility>
> <w:BreakWrappedTables/>
> <w:SnapToGridInCell/>
> <w:WrapTextWithPunct/>
> <w:UseAsianBreakRules/>
> <w:DontGrowAutofit/>
> <w:SplitPgBreakAndParaMark/>
> <w:EnableOpenTypeKerning/>
> <w:DontFlipMirrorIndents/>
> <w:OverrideTableStyleHps/>
> <w:UseFELayout/>
> </w:Compatibility>
> <m:mathPr>
> <m:mathFont m:val=3D"Cambria Math"/>
> <m:brkBin m:val=3D"before"/>
> <m:brkBinSub m:val=3D"--"/>
> <m:smallFrac m:val=3D"off"/>
> <m:dispDef/>
> <m:lMargin m:val=3D"0"/>
> <m:rMargin m:val=3D"0"/>
> <m:defJc m:val=3D"centerGroup"/>
> <m:wrapIndent m:val=3D"1440"/>
> <m:intLim m:val=3D"subSup"/>
> <m:naryLim m:val=3D"undOvr"/>
> </m:mathPr></w:WordDocument>
> </xml><![endif]--><!--[if gte mso 9]><xml>
> <w:LatentStyles DefLockedState=3D"false" DefUnhideWhenUsed=3D"true"
> DefSemiHidden=3D"true" DefQFormat=3D"false" DefPriority=3D"99"
> LatentStyleCount=3D"276">
> <w:LsdException Locked=3D"false" Priority=3D"0" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Normal"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"heading 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 7"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 8"/>
> <w:LsdException Locked=3D"false" Priority=3D"9" QFormat=3D"true" Name=3D"he
> ading =
> 9"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 7"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 8"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" Name=3D"toc 9"/>
> <w:LsdException Locked=3D"false" Priority=3D"35" QFormat=3D"true" Name=3D"c
> aption=
> "/>
> <w:LsdException Locked=3D"false" Priority=3D"10" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Title"/>
> <w:LsdException Locked=3D"false" Priority=3D"1" Name=3D"Default Paragraph F
> ont"=
> />
> <w:LsdException Locked=3D"false" Priority=3D"11" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtitle"/>
> <w:LsdException Locked=3D"false" Priority=3D"22" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Strong"/>
> <w:LsdException Locked=3D"false" Priority=3D"20" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Emphasis"/>
> <w:LsdException Locked=3D"false" Priority=3D"59" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Table Grid"/>
> <w:LsdException Locked=3D"false" UnhideWhenUsed=3D"false" Name=3D"Placehold
> er T=
> ext"/>
> <w:LsdException Locked=3D"false" Priority=3D"1" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"No Spacing"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 1"/>
> <w:LsdException Locked=3D"false" UnhideWhenUsed=3D"false" Name=3D"Revision"
> />
> <w:LsdException Locked=3D"false" Priority=3D"34" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"List Paragraph"/>
> <w:LsdException Locked=3D"false" Priority=3D"29" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Quote"/>
> <w:LsdException Locked=3D"false" Priority=3D"30" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Quote"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 1"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 2"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 3"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 4"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 5"/>
> <w:LsdException Locked=3D"false" Priority=3D"60" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Shading Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"61" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light List Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"62" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Light Grid Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"63" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 1 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"64" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Shading 2 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"65" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 1 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"66" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium List 2 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"67" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 1 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"68" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 2 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"69" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Medium Grid 3 Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"70" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Dark List Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"71" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Shading Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"72" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful List Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"73" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" Name=3D"Colorful Grid Accent 6"/>
> <w:LsdException Locked=3D"false" Priority=3D"19" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtle Emphasis"/>
> <w:LsdException Locked=3D"false" Priority=3D"21" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Emphasis"/>
> <w:LsdException Locked=3D"false" Priority=3D"31" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Subtle Reference"/>
> <w:LsdException Locked=3D"false" Priority=3D"32" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Intense Reference"/>
> <w:LsdException Locked=3D"false" Priority=3D"33" SemiHidden=3D"false"
> UnhideWhenUsed=3D"false" QFormat=3D"true" Name=3D"Book Title"/>
> <w:LsdException Locked=3D"false" Priority=3D"37" Name=3D"Bibliography"/>
> <w:LsdException Locked=3D"false" Priority=3D"39" QFormat=3D"true" Name=3D"T
> OC Hea=
> ding"/>
> </w:LatentStyles>
> </xml><![endif]-->
>
> <!--[if gte mso 10]>
> <style>
> /* Style Definitions */
> table.MsoNormalTable
> {mso-style-name:"Table Normal";
> mso-tstyle-rowband-size:0;
> mso-tstyle-colband-size:0;
> mso-style-noshow:yes;
> mso-style-priority:99;
> mso-style-parent:"";
> mso-padding-alt:0in 5.4pt 0in 5.4pt;
> mso-para-margin:0in;
> mso-para-margin-bottom:.0001pt;
> mso-pagination:widow-orphan;
> font-size:12.0pt;
> font-family:Cambria;
> mso-ascii-font-family:Cambria;
> mso-ascii-theme-font:minor-latin;
> mso-hansi-font-family:Cambria;
> mso-hansi-theme-font:minor-latin;}
> </style>
> <![endif]-->
>
>
>
> <!--StartFragment-->
>
> <p class=3D"MsoNormal">Mark, colleagues,<o:p></o:p></p>
>
> <p class=3D"MsoNormal"><o:p> </o:p></p>
>
> <p class=3D"MsoNormal">A quick update regarding the state of the nameservers
> =
> in the
> gTLD space, I have been monitoring the nameservers of the gTLDs, and across=
>
> time between 99.9% and 100% nameservers do not present any of the EDNS issu=
> es
> described in https://tools.ietf.org/html/draft-ietf-dnsop-no-response-issue=
> -04.
> Registries have solved the issues reported by ICANN in a timely manner.<o:p=
> ></o:p></p>
>
> <p class=3D"MsoNormal"><o:p> </o:p></p>
>
> <p class=3D"MsoNormal">Finally, a handful of name servers are copying the Z f
> =
> lag bit from the query header (see 8.1.3.3 of draft-ietf-dnsop-no-response-i=
> ssue-04) and
> this is related to a bug that has now been fixed now in Knot (see. https://=
> gitlab.labs.nic.cz/labs/knot/issues/476). We expect that in the near f=
> uture the MBZ
> issue should be solved in the gTLD space as Registries roll out the new ver=
> sion.<o:p></o:p></p><p class=3D"MsoNormal"><br></p><p class=3D"MsoNormal">Reg
> ard=
> s,</p><p class=3D"MsoNormal">Gustavo</p>
>
> <!--EndFragment--></div><div><br></div></div><div><br></div><div>On 7/26/16=
> , 15:59, "Gustavo Lozano" <<a href=3D"mailto:gustavo.lozano at icann.org">gus
> t=
> avo.lozano at icann.org</a>> wrote:</div><div><br></div><blockquote id=3D"MAC
> _=
> OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style=3D"BORDER-LEFT: #b5c4df 5 solid; PADDIN
> G=
> :0 0 0 5; MARGIN:0 0 0 5;"><div>Thank you Mark,</div><div><br></div><div>In =
> the past we worked with a few gTLD backends to solve these issues. I</div><d=
> iv>think that the massive improvement that you mentioned is related to this<=
> /div><div>effort. I will review your latest report and work with the affecte=
> d gTLD</div><div>backends to solve any new issue.</div><div><br></div><div>R=
> egards,</div><div><br></div><div>Gustavo Lozano</div><div>ICANN</div><div><b=
> r></div><div>On 7/25/16, 21:01, "<a href=3D"mailto:gtld-tech-bounces at icann.or
> g=
> ">gtld-tech-bounces at icann.org</a> on behalf of Mark Andrews"</div><div><<=
> a href=3D"mailto:gtld-tech-bounces at icann.org">gtld-tech-bounces at icann.org</a>
> =
> on behalf of <a href=3D"mailto:marka at isc.org">marka at isc.org</a>> wrote:</d
> i=
> v><div><br></div><blockquote id=3D"MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style=
> 3D"=
> BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div><br></d=
> iv><div>In message <<a href=3D"mailto:0EDF3BC2-6E1E-4A2B-B264-3972B5E994B2
> @=
> icann.org">0EDF3BC2-6E1E-4A2B-B264-3972B5E994B2 at icann.org</a>>, Francisco=
> </div><div>Arias writes:</div><blockquote id=3D"MAC_OUTLOOK_ATTRIBUTION_BLOCK
> Q=
> UOTE" style=3D"BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;
> "=
> ><div> Hi Mark,</div><div><br></div><div> Are you suggesting there is an iss=
> ue with TLD servers or second-level</div><div> names, or both?</div></blockq=
> uote><div><br></div><div>There are issues with both though the TLD servers h=
> ave show a massive</div><div>improvement [1] and the GTLD subset are suppose=
> d to be RFC compliant</div><div>with DNSSEC, EDNS(0) and STD 13 as per their=
> contracts. The root</div><div>servers also need to meet the same=
> level of compliance.</div><div><br></div><div>[2] shows that most of the TL=
> D and root servers are basically</div><div>compliant. The tests u=
> sed are described in [3].</div><div><br></div><div>The second level names ar=
> e a entirely different matter with only</div><div>~60% [1] of servers actual=
> ly passing just the EDNS(0) subset of the</div><div>tests above.</div><div><=
> br></div><div>Everytime new features (EDNS, DNSSEC, DNS COOKIES, AD=3D1 in qu
> e=
> ries)</div><div>have been deployed in the DNS resolver vendors have had to w=
> ork</div><div>around non compliant servers where possible or just live with =
> the</div><div>fact that you can't do reliable signaling because the broken s=
> ervers</div><div>were not removed from the ecosystem in a timely enough mann=
> er (AD</div><div>is echoed back by too many servers despite this being expli=
> cting</div><div>prohibited by STD13). This could have been avoide=
> d if nameservers</div><div>were actually checked for protocol compliance and=
> operators with</div><div>non-compliant servers informed that their servers =
> are broken.</div><div><br></div><div>Some of this will improve as operators =
> use F1 [4] load balancers</div><div>and Checkpoint Firewalls upgrade (Unknow=
> n EDNS version and Unknown</div><div>EDNS Flags will no longer cause the DNS=
> message to be dropped based</div><div>on correspondence with a Checkpoint d=
> eveloper.) This won't cover</div><div>all cases of packets being =
> dropped. Nor will it address the servers</div><div>returning inap=
> propriate responses.</div><div><br></div><div>To be able to use the extensio=
> ns mechanisms specified in EDNS(0)</div><div>the deployed server need to be =
> well behaved when they see a message</div><div>using a extensions mechanisms=
> . This is very much not the case</div><div>today.</div><div><br><=
> /div><div>Mark</div><div><br></div><div>[1] <a href=3D"https://ednscomp.isc.o
> r=
> g/compliance/summary.html">https://ednscomp.isc.org/compliance/summary.html<=
> /a></div><div>[2] <a href=3D"https://ednscomp.isc.org/compliance/tld-fullrepo
> r=
> t.txt">https://ednscomp.isc.org/compliance/tld-fullreport.txt</a></div><div>=
> [3] <a href=3D"https://tools.ietf.org/html/draft-ietf-dnsop-no-response-issue
> -=
> 03">https://tools.ietf.org/html/draft-ietf-dnsop-no-response-issue-03</a>.</=
> div><div>[4] </div><div><a href=3D"https://support.f5.com/kb/en-us/solutions/
> p=
> ublic/16000/200/sol16240.html">https://support.f5.com/kb/en-us/solutions/pub=
> lic/16000/200/sol16240.html</a></div><div><br></div><div>Mark</div><div><br>=
> </div><blockquote id=3D"MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style=3D"BORDER-L
> EFT=
> : #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div> Regards,</div><di=
> v><br></div><div> --</div><div> Francisco</div><div> On 7/18/16, 2:07 PM, "<=
> a href=3D"mailto:gtld-tech-bounces at icann.org">gtld-tech-bounces at icann.org</a>
> =
> on behalf of Mark</div><div> Andrews" <<a href=3D"mailto:gtld-tech-bounces
> @=
> icann.org">gtld-tech-bounces at icann.org</a> on behalf of <a href=3D"mailto:mar
> k=
> a at isc.org">marka at isc.org</a>> wrote:</div><div><br></div><div><br></div><=
> div> As part of preparations for shipping nameserver=
> s that support DNS</div><div> COOKIES (RFC 7873) I h=
> ave been measuring EDNS Compliance in a number</div><div> &=
> nbsp; data sets the results of which are available at</div><div> <a href=3D"h
> t=
> tps://ednscomp.isc.org">https://ednscomp.isc.org</a></div><div> &=
> nbsp; along with a online tester. We wanted how much will b=
> reak when we</div><div> ship BIND 9.11.0 which has D=
> NS COOKIES on by default.</div><div><br></div><div> =
> We found there were zones that could no longer resolve if validation</div><d=
> iv> was enabled. Named falls back to plain DNS on ce=
> rtain detected</div><div> errors as there isn't time=
> to probe exact failure causes by trial</div><div> a=
> nd error. Even if trial and error worked for DNS COOKIEs the</div=
> ><div> problem will get worse as more EDNS features =
> get used.</div><div><br></div><div> We found zones t=
> hat were taking multiple seconds to resolve. We</div><div> &=
> nbsp; were back to the sort of resolution times we saw when EDNS=
> was first</div><div> introduced for some zones.</di=
> v><div><br></div><div> We saw increased queries bein=
> g needed to be made as servers didn't</div><div> cor=
> rectly ignore unknown EDNS options.</div><div><br></div><div> &nb=
> sp; All these errors are easily determinable by running a handful of</=
> div><div> queries against each server.</div><div><br=
> ></div><div> RFC 1034 and RFC 1035 were written assu=
> ming that servers delegated</div><div> to would be R=
> FC compliant. Currently GTLD servers are checked and</div><div>&n=
> bsp; there is no reason that servers delegated to by the G=
> TLD servers</div><div> can't also be checked and the=
> operators asked to fix the faults</div><div> detect=
> ed. This can be done at both the RFC 1034 and RFC 1035 level</div=
> ><div> and at the EDNS level. It is not a=
> actionable condition if all the</div><div> EDNS tes=
> ts fail in a way that indicated the EDNS is not supported.</div><div><br></d=
> iv><div> I would suggest that {E}DNS compliance chec=
> king be done within a</div><div> week of a new serve=
> r being registered and delegated to and 1/2</div><div> &nbs=
> p; yearly thereafter. If a server fails a test that the operator =
> /</div><div> registrant be informed and the server b=
> e retested in a month. I</div><div> would=
> also suggest that compliance testing results and test date</div><div> =
> should be record in whois or similar so there is no need =
> to retest</div><div> too frequently.</div><div><br><=
> /div><div> Mark</div><div> -=
> -</div><div> Mark Andrews, ISC</div><div>  =
> ; 1 Seymour St., Dundas Valley, NSW 2117, Australia</div><div>&n=
> bsp; PHONE:<span class=3D"Apple-tab-span" style=3D"white-sp
> ace=
> :pre"> </span>+61 2 9871 4742<span class=3D"Apple-tab-span" style=3D"w
> hite-space=
> :pre"> </span><span class=3D"Apple-tab-span" style=3D"white-space:pre"
> > </span>&=
> nbsp; INTERNET: <a href=3D"mailto:m
> a=
> rka at isc.org">marka at isc.org</a></div><div><br></div><div><br></div></blockquo=
> te><div><br></div><div>-- </div><div>Mark Andrews, ISC</div><div>1 Seymour S=
> t., Dundas Valley, NSW 2117, Australia</div><div>PHONE: +61 2 9871 4742 =
> ; &nb=
> sp; INTERNET: <a href=3D"mailto:marka at isc.org">marka at isc.org</a><
> /=
> div></blockquote><div><br></div></blockquote></body></html>
>
> --B_3555510884_5544002--
>
>
> --B_3555510884_5497104
> Content-type: application/xml; name="default.xml"
> Content-disposition: attachment;
> filename="default.xml"
> Content-transfer-encoding: base64
>
>
> UEsDBBQABgAIAAAAIQCb6HBP/AAAABwCAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbKyRy2rD
> MBBF94X+g9C22HK6KKXYzqKPXR+L9AMGeWyL2CMhTULy9x07LpQSAoVuBNLMvffMqFwfxkHt
> MSbnqdKrvNAKyfrGUVfpz81Ldq9VYqAGBk9Y6SMmva6vr8rNMWBSoqZU6Z45PBiTbI8jpNwH
> JKm0Po7Aco2dCWC30KG5LYo7Yz0xEmc8eei6fMIWdgOr54M8n0hErtXjqW+KqjSEMDgLLKBm
> qpqzuohDuiDcU/OLLlvIclHO5ql3Id0sCe+ymugaVB8Q+Q1G4TAsQ+LP8xVIRov5ZeYz0b5t
> ncXG290o68hn48XsTwCr/4n+zjTz39ZfAAAA//8DAFBLAwQUAAYACAAAACEApdan58AAAAA2
> AQAACwAAAF9yZWxzLy5yZWxzhI/PasMwDIfvhb2D0X1R0sMYJXYvpZBDL6N9AOEof2giG9sb
> 69tPxwYKuwiEpO/3qT3+rov54ZTnIBaaqgbD4kM/y2jhdj2/f4LJhaSnJQhbeHCGo3vbtV+8
> UNGjPM0xG6VItjCVEg+I2U+8Uq5CZNHJENJKRds0YiR/p5FxX9cfmJ4Z4DZM0/UWUtc3YK6P
> qMn/s8MwzJ5PwX+vLOVFBG43lExp5GKhqC/jU72QqGWq1B7Qtbj51v0BAAD//wMAUEsDBBQA
> BgAIAAAAIQBreZYWgwAAAIoAAAAcAAAAdGhlbWUvdGhlbWUvdGhlbWVNYW5hZ2VyLnhtbAzM
> TQrDIBBA4X2hd5DZN2O7KEVissuuu/YAQ5waQceg0p/b1+XjgzfO3xTVm0sNWSycBw2KZc0u
> iLfwfCynG6jaSBzFLGzhxxXm6XgYybSNE99JyHNRfSPVkIWttd0g1rUr1SHvLN1euSRqPYtH
> V+jT9yniResrJgoCOP0BAAD//wMAUEsDBBQABgAIAAAAIQAhWqKEIQcAANsdAAAWAAAAdGhl
> bWUvdGhlbWUvdGhlbWUxLnhtbOxZT28bRRS/I/EdRnsvsRMnTaI6VezYDbRpo9gt6nG8O/ZO
> M7uzmhkn8Q21RyQkREEcqMSNAwIqtRKX8mkCRVCkfgXezOyud+Jxk5QAFTSH1jv7e2/e+70/
> 82evXD1KGDogQlKeNoP6e7UAkTTkEU1HzeB2v3tpNUBS4TTCjKekGUyIDK5uvPvOFbyuYpIQ
> BPKpXMfNIFYqW19YkCEMY/kez0gK74ZcJFjBoxgtRAIfgt6ELSzWaisLCaZpgFKcgNpbwyEN
> CeprlcFGobzD4DFVUg+ETPS0auJIGGy0X9cIOZFtJtABZs0A5on4YZ8cqQAxLBW8aAY18xcs
> bFxZwOu5EFNzZCtyXfOXy+UC0f6imVOMBuWk9W5j7fJWqd8AmJrFdTqddqde6jMAHIbgqbWl
> qrPRXa23Cp0VkP05q7tdW641XHxF/9KMzWutVmt5LbfFKjUg+7Mxg1+trTQ2Fx28AVn88gy+
> 0dpst1ccvAFZ/MoMvnt5baXh4g0oZjTdn0HrgHa7ufYSMuRs2wtfBfhqLYdPUZANZXbpKYY8
> VfNyLcH3uOgCQAMZVjRFapKRIQ4hi9uY0YGgegK8TnDljR0K5cyQngvJUNBMNYMPMgwVMdX3
> 8tl3L589Qcf3nx7f//H4wYPj+z9YRY7UNk5HVakX33z6x6OP0O9Pvn7x8HM/Xlbxv3z/8c8/
> feYHQvlMzXn+xeNfnz5+/uUnv3370APfFHhQhfdpQiS6SQ7RHk/AMcOKazkZiPNJ9GNMqxKb
> 6UjiFOtZPPo7KnbQNyeYYQ+uRVwG7whoHz7gtfE9x+BeLMYqj7fj2fU4cYA7nLMWF14Wruu5
> KjT3x+nIP7kYV3F7GB/45m7j1IlvZ5xB36Q+le2YOGbuMpwqPCIpUUi/4/uEePi6S6nD6w4N
> BZd8qNBdilqYeinp04GTTVOhbZpAXCY+AyHeDjc7d1CLM5/XW+TARUJVYOYxvk+YQ+M1PFY4
> 8ans44RVCb+BVewzsjcRYRXXkQoiPSKMo05EpPTJ3BLgbyXo16F1+MO+wyaJixSK7vt03sCc
> V5FbfL8d4yTzYXs0javY9+U+pChGu1z54DvcrRD9DHHA6dxw36HECffp3eA2HTkmTRNEvxkL
> TyyvEe7kb2/ChpiYVgNN3enVCU1f1bgT6Nu54xfXuKFVPv/qkcfuN7VlbwIJvprZPtGo5+FO
> tuc2FxF987vzFh6nuwQKYnaJetuc3zbn4D/fnOfV88W35GkXhgatt0x2o2223cncXfeQMtZT
> E0ZuSLPxlrD2RF0Y1HLmxEnKU1gWw09dyTCBgxsJbGSQ4OpDquJejDPYtNcDrWQkc9UjiTIu
> 4bBohr26NR42/soeNZf1IcR2DonVDo/s8JIeLs4apRpj1cgcaIuJlrSCs062dDlXCr69zmR1
> bdSZZ6sb00xTdGYrXdYUm0M5UF66BoMlm7CpQbAVApZX4Myvp4bDDmYk0rzbGBVhMVH4e0KU
> e20diXFEbIic4QqbdRO7IoVm/NPu2Rw5H5sla0Da6UaYtJifP2ckuVAwJRkET1YTS6u1xVJ0
> 2AzWlheXAxTirBkM4ZgLP5MMgib1NhCzEdwVhUrYrD21Fk2RTj1e82dVHW4u5hSMU8aZkGoL
> y9jG0LzKQ8VSPZO1f3G5oZPtYhzwNJOzWbG0Cinyr1kBoXZDS4ZDEqpqsCsjmjv7mHdCPlZE
> 9OLoEA3YWOxhCD9wqv2JqITbClPQ+gGu1jTb5pXbW/NOU73QMjg7jlkW47xb6quZouIs3PST
> 0gbzVDEPfPPabpw7vyu64i/KlWoa/89c0csBXB4sRToCIdzsCox0pTQDLlTMoQtlMQ27AtZ9
> 0zsgW+B6Fl4D+XC/bP4X5ED/b2vO6jBlDWdAtUdHSFBYTlQsCNmFtmSy7xRl9XzpsSpZrshk
> VMVcmVmzB+SAsL7ugSu6BwcohlQ33SRvAwZ3Mv/c57yCBiO9R6nWm9PJyqXT1sA/vXGxxQxO
> ndhL6Pwt+C9NLFf36epn5Y14sUZWHdEvprukRlEVzuK3tpZP9ZomnGUBrqy1tmPNeLy4XBgH
> UZz1GAbL/UwGV0BI/wPrHxUhsx8r9ILa53vQWxF8e7D8IcjqS7qrQQbpBml/DWDfYwdtMmlV
> ltp856NZKxbrC96olvOeIFtbdpZ4n5PschPlTufU4kWSnTPscG3H5lINkT1ZojA0LM4hJjDm
> K1f1QxQf3INAb8GV/5jZT1MygydTB9muMNk14NEk/8mkXXBt1ukzjEaydI8MEY2OivNHyYQt
> Ift5pNgiG7QW04lWCi75Dg2uYI7Xona1LIUXTxcuJczM0LJLYXOX5lMAH8fyxq2PdoC3TdZ6
> rYurYIqlf4WyMxjvp8x78jkrZfag+MpAvQZl6ujVlOVMAXmziQefNwWGo1fP9F9YdGymm5Td
> +BMAAP//AwBQSwMEFAAGAAgAAAAhAA3RkJ+2AAAAGwEAACcAAAB0aGVtZS90aGVtZS9fcmVs
> cy90aGVtZU1hbmFnZXIueG1sLnJlbHOEj00KwjAUhPeCdwhvb9O6EJEm3YjQrdQDhOQ1DTY/
> JFHs7Q2uLAguh2G+mWm7l53JE2My3jFoqhoIOumVcZrBbbjsjkBSFk6J2TtksGCCjm837RVn
> kUsoTSYkUiguMZhyDidKk5zQilT5gK44o49W5CKjpkHIu9BI93V9oPGbAXzFJL1iEHvVABmW
> UJr/s/04GolnLx8WXf5RQXPZhQUoosbM4CObqkwEylu6usTfAAAA//8DAFBLAQItABQABgAI
> AAAAIQCb6HBP/AAAABwCAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1s
> UEsBAi0AFAAGAAgAAAAhAKXWp+fAAAAANgEAAAsAAAAAAAAAAAAAAAAALQEAAF9yZWxzLy5y
> ZWxzUEsBAi0AFAAGAAgAAAAhAGt5lhaDAAAAigAAABwAAAAAAAAAAAAAAAAAFgIAAHRoZW1l
> L3RoZW1lL3RoZW1lTWFuYWdlci54bWxQSwECLQAUAAYACAAAACEAIVqihCEHAADbHQAAFgAA
> AAAAAAAAAAAAAADTAgAAdGhlbWUvdGhlbWUvdGhlbWUxLnhtbFBLAQItABQABgAIAAAAIQAN
> 0ZCftgAAABsBAAAnAAAAAAAAAAAAAAAAACgKAAB0aGVtZS90aGVtZS9fcmVscy90aGVtZU1h
> bmFnZXIueG1sLnJlbHNQSwUGAAAAAAUABQBdAQAAIwsAAAAA
> --B_3555510884_5497104--
>
> --B_3555510884_5514098
> Content-Type: application/pkcs7-signature; name="smime.p7s"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment; filename="smime.p7s"
>
> MIISWQYJKoZIhvcNAQcCoIISSjCCEkYCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC
> ECUwggWVMIIEfaADAgECAhAMQUh3JZMnZ//DACJVuxbiMA0GCSqGSIb3DQEBBQUAMGIxCzAJ
> BgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2Vy
> dC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IEFzc3VyZWQgSUQgQ0EtMTAeFw0xNjA2MDIwMDAw
> MDBaFw0xOTA2MDExMjAwMDBaMIHDMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
> YTEUMBIGA1UEBxMLTG9zIEFuZ2VsZXMxPDA6BgNVBAoTM0ludGVybmV0IENvcnBvcmF0aW9u
> IGZvciBBc3NpZ25lZCBOYW1lcyBhbmQgTnVtYmVyczEiMCAGA1UEAxMZR3VzdGF2byBMb3ph
> bm8gMjAxNi0wNi0wMTEnMCUGCSqGSIb3DQEJARYYZ3VzdGF2by5sb3phbm9AaWNhbm4ub3Jn
> MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK5IQLt9Eu9j5MXWNvqktU+qCadx
> nQO8Dj2unPn0EJ+fil/DY5EMyc2Lj8EIfyTs8qGTGtrzw3uUNnfWv/VGLEDemorcy9CgVUi9
> 4L+pV0KRCSQFM4SYfZWxRWOABiANfE5CPvGDC5EvUbXxRkoVvCH0sGpRuKu4aqtwGJBdyRW5
> 0xo20vFsmy4Jm90rxHd1sd1cAfz5ffQjd/FD0z1/3cFyVHEAdwx/YdJrB56mpXSqOJsqqdYP
> 1/KpbODyNMh47KvPBq5NLZhclLIeVwureSoUFhhD9+UWORhLlRPTdGMFcyRuSbKdXbJR6K7a
> TZ4WqnH5QFbnKdNZN/83qw2JawIDAQABo4IB4zCCAd8wHwYDVR0jBBgwFoAUFQASKxOYspkH
> 7R7for5XDStnAs0wHQYDVR0OBBYEFA2vYZIJHy5dHhAIrqN1nexvkI8cMAwGA1UdEwEB/wQC
> MAAwIwYDVR0RBBwwGoEYZ3VzdGF2by5sb3phbm9AaWNhbm4ub3JnMA4GA1UdDwEB/wQEAwIF
> oDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwQwYDVR0gBDwwOjA4BgpghkgBhv1s
> BAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfQYDVR0f
> BHYwdDA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElE
> Q0EtMS5jcmwwOKA2oDSGMmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3Vy
> ZWRJRENBLTEuY3JsMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au
> ZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v
> RGlnaUNlcnRBc3N1cmVkSURDQS0xLmNydDANBgkqhkiG9w0BAQUFAAOCAQEAqAgI8bC8qDYg
> RiYEsrvV+w+EnGNnPVCor19+OLF9V5m5jkktGhjm4UuyCrMkGS2W+wXkCrtE41p7s4rByoEP
> mr6WfcigJR917uFSCT7tnPtnfmnIsPsBICjZJfvQPJ43OKJ22eZM/Wi3Hcknup+ZD17FJskO
> xD0Tycrh/yq+oa4cPeiWkQlM0y0gqTCyidNAIT6OrApqKJ3ldKYTFmAesVnfyYKOkjAUurUB
> YyrpRmgZ26etSoen93OqaDlFd7xgtPoBso50ZnCp5aMLckWeKKGPA4ADJtiMIL9JTtLXJMQ6
> LIpO66GOlzvSxJ3M+rgq50OTN5KYkMJwzh/SHGNWRjCCBs0wggW1oAMCAQICEAb9+QOWA63q
> AArrPye7uhswDQYJKoZIhvcNAQEFBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lD
> ZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQg
> QXNzdXJlZCBJRCBSb290IENBMB4XDTA2MTExMDAwMDAwMFoXDTIxMTExMDAwMDAwMFowYjEL
> MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2lj
> ZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgQXNzdXJlZCBJRCBDQS0xMIIBIjANBgkqhkiG
> 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IItmfnKwkKVpYBzQHDSnlZUXKnE0kEGj8kz/E1FkVyB
> n+0snPgWWd+etSQVwpi5tHdJ3InECtqvy15r7a2wcTHrzzpADEZNk+yLejYIA6sMNP4YSYL+
> x8cxSIB8HqIPkg5QycaH6zY/2DDD/6b3+6LNb3Mj/qxWBZDwMiEWicZwiPkFl32jx0PdAug7
> Pe2xQaPtP77blUjE7h6z8rwMK5nQxl0SQoHhg26Ccz8mSxSQrllmCsSNvtLOBq6thG9IhJtP
> QLnxTPKvmPv2zkBdXPao8S+v7Iki8msYZbHBc63X8djPHgp0XEK4aH631XcKJ1Z8D2KkPzIU
> YJX9BwSiCQIDAQABo4IDejCCA3YwDgYDVR0PAQH/BAQDAgGGMDsGA1UdJQQ0MDIGCCsGAQUF
> BwMBBggrBgEFBQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDCDCCAdIGA1UdIASC
> AckwggHFMIIBtAYKYIZIAYb9bAABBDCCAaQwOgYIKwYBBQUHAgEWLmh0dHA6Ly93d3cuZGln
> aWNlcnQuY29tL3NzbC1jcHMtcmVwb3NpdG9yeS5odG0wggFkBggrBgEFBQcCAjCCAVYeggFS
> AEEAbgB5ACAAdQBzAGUAIABvAGYAIAB0AGgAaQBzACAAQwBlAHIAdABpAGYAaQBjAGEAdABl
> ACAAYwBvAG4AcwB0AGkAdAB1AHQAZQBzACAAYQBjAGMAZQBwAHQAYQBuAGMAZQAgAG8AZgAg
> AHQAaABlACAARABpAGcAaQBDAGUAcgB0ACAAQwBQAC8AQwBQAFMAIABhAG4AZAAgAHQAaABl
> ACAAUgBlAGwAeQBpAG4AZwAgAFAAYQByAHQAeQAgAEEAZwByAGUAZQBtAGUAbgB0ACAAdwBo
> AGkAYwBoACAAbABpAG0AaQB0ACAAbABpAGEAYgBpAGwAaQB0AHkAIABhAG4AZAAgAGEAcgBl
> ACAAaQBuAGMAbwByAHAAbwByAGEAdABlAGQAIABoAGUAcgBlAGkAbgAgAGIAeQAgAHIAZQBm
> AGUAcgBlAG4AYwBlAC4wCwYJYIZIAYb9bAMVMBIGA1UdEwEB/wQIMAYBAf8CAQAweQYIKwYB
> BQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQwYIKwYB
> BQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJv
> b3RDQS5jcnQwgYEGA1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E
> aWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0
> LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwHQYDVR0OBBYEFBUAEisTmLKZB+0e
> 36K+Vw0rZwLNMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgPMA0GCSqGSIb3DQEB
> BQUAA4IBAQBGUD7Jtygkpzgdtlspr1LPUukxR6tWXHvVDQtBs+/sdR90OPKyXGGinJXDUOSC
> uSPRujqGcq04eKx1XRcXNHJHhZRW0eu7NoR3zCSl8wQZVann4+erYs37iy2QwsDStZS9Xk+x
> BdIOPRqpFFumhjFiqKgz5Js5p8T1zh14dpQlc+Qqq8+cdkvtX8JLFuRLcEwAiR78xXm8TBJX
> /l/hHrwCXaj++wc4Tw3GXZG5D2dFzdaD7eeSDY2xaYxP+1ngIw/Sqq4AfO6cQg7Pkdcntxbu
> D8O9fAqg7iwIVYUiuOsYGk38KiGtSTGDR5V3cdyxG0tLHBCcdxTBnU8vWpUIKRAmMIIDtzCC
> Ap+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBlMQswCQYDVQQGEwJV
> UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQw
> IgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcN
> MzExMTEwMDAwMDAwWjBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkw
> FwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElE
> IFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg
> +XESpa7cJpSIqvTO9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYP
> mDI2dsze3Tyoou9q+yHyUmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+wRvDjDPZ
> 2C8Y/igPs6eD1sNuRMBhNZYW/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4VYcgoc/lbQrISXwx
> mDNsIumH0DJaoroTghHtORedmTpyoeb6pNnVFzF1roV9Iq4/AUaG9ih5yLHa5FcXxH4cDrC0
> kqZWs72yl+2qp/C3xag/lRbQ/6GW6whfGHdPAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAP
> BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRF66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSME
> GDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAog683+Lt8ONy
> c3pklL/3cmbYMuRCdWKuh+vy1dneVrOfzM4UKLkNl2BcEkxY5NM9g0lFWJc1aRqoR+pWxnmr
> EthngYTffwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38FnSbNd67IJKusm7Xi+fT8r87cm
> NW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i8b5QZ7dsvfPxH2sMNgcW
> fzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe+o0bJW1sj6W3YQGx
> 0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8jGCAfwwggH4AgEBMHYwYjELMAkGA1UE
> BhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNv
> bTEhMB8GA1UEAxMYRGlnaUNlcnQgQXNzdXJlZCBJRCBDQS0xAhAMQUh3JZMnZ//DACJVuxbi
> MAkGBSsOAwIaBQCgXTAjBgkqhkiG9w0BCQQxFgQUHdWxAycfEqUE51HR8+ssL0FByTYwGAYJ
> KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYwOTAxMDA1NDQ0WjAN
> BgkqhkiG9w0BAQEFAASCAQAR+kxcQ0Y2aIEHd5givQvnsPir9RoxX/skOtB9oYGVLFb8Mni4
> s/QRI9Eg20QSZQZJwjc9dqG4sDyD9eqzbJXhWMFkQEUTcFBLWkMpxRbeu2cNPkLmoJEHew14
> tWjSGm29Eny8kPRG6h+HHRx6k06f97dnzaVS0SnyY3tiobnW94BLKY/3Rc8wDxL4rX8BhV0c
> 28HWuhBYKoOav23WxqwFwxXc9Vkbh5MuuiIKTHTSMqeo3yG3Dde+kZygcC8ibycU/QI4WkpM
> be9m+5t/zr1f5JrV93xKwiKCZ958NbdSPuG3ThgmoRqGnUWIB101B/tPeLHYq9kjtHVeYPyH
> TG1k
>
> --B_3555510884_5514098--
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the gtld-tech
mailing list