[gtld-tech] .DESI to Be Placed in the Emergency Back-end Registry Operator Program
Rubens Kuhl
rubensk at nic.br
Fri Oct 20 10:52:57 UTC 2023
While the registry failed, the back-end/RSP didn't. CentralNIC/Team Internet, Nominet and ICANN could have arranged for a smoother transition DNSSEC-wise.
Rubens
> On 20 Oct 2023, at 11:52, Michele Neylon - Blacknight via gtld-tech <gtld-tech at icann.org> wrote:
>
> EBERO kicks in when the world is on fire and the registry has failed.
> I don’t see how you can force a failed registry to do anything
>
> --
> Mr Michele Neylon
> Blacknight Solutions
> Hosting, Colocation & Domains
> https://www.blacknight.com/
> https://blacknight.blog/
> Intl. +353 (0) 59 9183072
> Direct Dial: +353 (0)59 9183090
> Personal blog: https://michele.blog/
> Some thoughts: https://ceo.hosting/
> -------------------------------
> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845
>
> I have sent this email at a time that is convenient for me. I do not expect you to respond to it outside of your usual working hours.
>
>
> From: gtld-tech <gtld-tech-bounces at icann.org <mailto:gtld-tech-bounces at icann.org>> on behalf of Wes Hardaker via gtld-tech <gtld-tech at icann.org <mailto:gtld-tech at icann.org>>
> Date: Friday, 20 October 2023 at 11:49
> To: Dr Eberhard W Lisse via gtld-tech <gtld-tech at icann.org <mailto:gtld-tech at icann.org>>
> Subject: Re: [gtld-tech] .DESI to Be Placed in the Emergency Back-end Registry Operator Program
>
> [EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources.
>
> Dr Eberhard W Lisse via gtld-tech <gtld-tech at icann.org> writes:
>
> > Pardon my ignorance, but would such a roll at transfer not require the
> > collaboration of the losing Registry?
>
> [Note: though I'm on the ICANN board, I'm both not speaking for the
> board and I don't have any direct knowledge of the situation of this
> particular event in the first place -- I'm speaking purely from a
> technical and personal perspective only]
>
> That's certainly the core of the problem, but the answer depends on a
> lot of things like the signature timing of the current records, the TTLs
> of those records and the DS record, etc. You can do things to minimize
> the impact if you don't have the original DNSKEY but it may not be
> trivial if the timing constraints don't let you do something safer.
> Certainly one thing you shouldn't do at the same time is an algorithm
> roll, as that would increase the complexity significantly.
>
> --
> Wes Hardaker
> USC/ISI
> _______________________________________________
> gtld-tech mailing list
> gtld-tech at icann.org
> https://mm.icann.org/mailman/listinfo/gtld-tech
>
> ________________________________________________By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
> _______________________________________________
> gtld-tech mailing list
> gtld-tech at icann.org <mailto:gtld-tech at icann.org>
> https://mm.icann.org/mailman/listinfo/gtld-tech
>
> ________________________________________________By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mm.icann.org/pipermail/gtld-tech/attachments/20231020/06ddd9c4/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 529 bytes
Desc: Message signed with OpenPGP
URL: <https://mm.icann.org/pipermail/gtld-tech/attachments/20231020/06ddd9c4/signature.asc>
More information about the gtld-tech
mailing list