Re: [dns-wg] NCC reverse delegation criteria

2019-06-12 Thread Måns Nilsson
Subject: Re: [dns-wg] NCC reverse delegation criteria Date: Wed, Jun 12, 2019 
at 11:06:33PM +0300 Quoting Nick Hilliard (n...@foobar.org):
> Måns Nilsson wrote on 12/06/2019 22:42:
> > I suggest that we perform the absolute minimum of policy footwork to
> > endorse this procedure as is. Because I feel we have a strong if not
> > absolute consensus for carrying on as usual from those who spoke up here.
> 
> we don't really need this because it's not fixing a problem. If an actual
> problem crops up in future, then creating a policy might be one potential
> approach for handling it, or maybe not.  Otherwise, the RIPE NCC's record
> for handling dns delegation over the years shows that they're doing a good
> job and unless this changes, the best thing to do would be to let them
> continue doing their job as they see fit.

This, s what I mean with "absolute minimum of policy footwork". 

I think we're done. 
-- 
Måns Nilsson primary/secondary/besserwisser/machina
MN-1334-RIPE   SA0XLR+46 705 989668
... I see TOILET SEATS ...


signature.asc
Description: PGP signature


Re: [dns-wg] NCC reverse delegation criteria

2019-06-11 Thread Måns Nilsson
Subject: Re: [dns-wg] NCC reverse delegation criteria Date: Tue, Jun 11, 2019 
at 07:52:18PM +0200 Quoting Jonas Frey (j...@probe-networks.de):

> It seems to me that all documentation regarding this topic is highly
> outdated (atleast what i have found, see ISC's docs for BIND).

Because 20 years ago, we realised that this is a problem and stopped
intermingling recursive and authoritative service. Software like the
djb suite, nsd and unbound was written to assist in this separation.

Thus, noone has bothered to revisit the docs on the subject.

Part of the response you have received, thus, is because the separation
requirement is mostly regarded as completely uncontroversial, like "do
not allow TELNET without IAC DO ENCRYPT" or "Do not let SNMP community
Public have write access" and similar obviousities.

I suggest we wait for the NCC folks to come back with the exact list of
requirements used today and starting from those the community, since this
is more controversial than I and others thought, should try to formulate
a policy that is consistent with the desires and needs of the community
and the Internet.

/Måns, down memory lane.
-- 
Måns Nilsson primary/secondary/besserwisser/machina
MN-1334-RIPE   SA0XLR+46 705 989668
I've read SEVEN MILLION books!!


signature.asc
Description: PGP signature


Re: [dns-wg] NCC reverse delegation criteria

2019-06-11 Thread Måns Nilsson
Subject: Re: [dns-wg] NCC reverse delegation criteria Date: Tue, Jun 11, 2019 
at 10:52:00AM +0200 Quoting Anand Buddhdev (ana...@ripe.net):
> Good morning Måns,
> 
> We will come back to you shortly with answers to your and others'
> questions in this thread.

Excellent! 

-- 
Måns Nilsson primary/secondary/besserwisser/machina
MN-1334-RIPE   SA0XLR+46 705 989668
I hope I bought the right relish ... z ...


signature.asc
Description: PGP signature