Re: New addresses for b.root-servers.net

2023-06-01 Thread Jan Schaumann via NANOG
Robert Story wrote: > > USC/ISI is renumbering both its IPv4 and IPv6 addresses for > b.root-servers.net on 2023-11-27. Our new IPv4 address will be > 170.247.170.2 and our new IPv6 address will be 2801:1b8:10::b. > USC/ISI will continue to support root service over our current IPv4 and > IPv6

Re: Google.com SSL cert issues

2022-09-21 Thread Jan Schaumann via NANOG
Mark Stevens wrote: > Is anyone else getting the following error when trying to access any of > google's services? > SSL_ERROR_RX_RECORD_TOO_LONG Isn't this usually a sign of a protocol mismatch? I.e., TLS 1.3 vs TLS 1.2. My money would be a MitM / middlebox / proxy that messed up when your

Re: "Permanent" DST

2022-03-15 Thread Jan Schaumann via NANOG
Dave wrote: > Folks for most systems, this is a change to a single file. Not a really hard > thing to accomplish Oh, hah, good one. I twitch with mild PTSD thinking about the last time there was change to DST in the US[1], and how everybody quickly found out that e.g., Java, databases,

Re: Google uploading your plain text passwords

2021-06-11 Thread Jan Schaumann via NANOG
William Herrin wrote: > It turns out that every password I allowed Chrome on Android to > remember, it uploaded to Google. In plain text!! Chrome does not store your passwords in plain text. It encrypts them locally, on e.g. macOS using, I think, a secret stored in the keychain under "Chrome

Re: mail admins?

2020-04-21 Thread Jan Schaumann
Neil Hanlon wrote: > I think you just need to let scripts run in your browser for nanog.org. > > It uses Javascript to add the emails in after the fact, it appears. Yep. It's obfuscation via an XOR with a key included in the href. So if you do not want to run javascript, you can grab the

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2020-03-11 Thread Jan Schaumann
Owen DeLong wrote: > DOH isn?t inherently bad, but every implementation > of DOH that I am aware of involves depriving the > user of choice and/or control I don't think that's quite correct. There is an unfortunate and persistent conflation of "DoH" with "DoH to a centralized third-party

Re: Crowdfunding critical infrastructure

2019-06-27 Thread Jan Schaumann
Miles Fidelman wrote: > I think it would be a grand thing if someone put together a visible list of > critical Internet infrastructure, who maintains it, and perhaps "click to > support" buttons for those that need support. Perhaps an opportunity to collaborate with

Ethical Obligations in Internet Operations

2015-09-11 Thread Jan Schaumann
Hello, I'm currently preparing a talk on "Ethical Obligations in Internet Operations"[1] for Velocity NY in October. In preparation, I've put together a short, anonymous survey for people involved in "Internet Operations":

large scale ipsec

2013-11-01 Thread Jan Schaumann
Hello, Who here on this list has deployed IPSec or other comparable lower layer encryption in a large scale environment, or attempted to do so? I've repeatedly heard claims that doing so is not feasible (either operationally or financially), but I have not seen any specific studies, reports,

Re: large scale ipsec

2013-11-01 Thread Jan Schaumann
Christopher Morrow morrowc.li...@gmail.com wrote: One might look at MS's documentation about deploying end-to-end ipsec in their enterprise for one example of peer-to-peer ubiquitous ipsec. This is interesting and kind of what I'm looking for. Do you have a pointer to this documentation? My

Re: BBC reports Kenya fiber break

2012-02-29 Thread Jan Schaumann
Joly MacFie j...@punkcast.com wrote: A comment on the WSJ storyhttp://online.wsj.com/article/SB10001424052970203833004577249434081658686.htmlcontains a link to a great map. http://www.submarinecablemap.com/ I always liked this one, too: http://is.gd/DXcddb (Yes, flash. Still.) -Jan

Re: On Working Remotely

2011-12-05 Thread Jan Schaumann
David Radcliffe da...@davidradcliffe.org wrote: I do have to say to anyone planning to work from home, make sure you have a proper work space. For whatever it's worth: I have been working from home for the last 3.5 years. I live in Manhattan in a one-bedroom with a 4 year and now a 2

Re: L3DSR -- Overcoming Layer 2 Limitations of Direct Server Return Load Balancing Video?

2011-07-26 Thread Jan Schaumann
Matt Hite li...@beatmixed.com wrote: Might someone have the video for this presentation in their personal stash? http://www.nanog.org/meetings/nanog51/presentations/Monday/NANOG51.Talk45.nanog51-Schaumann.pdf I don't have the video handy, but there really wasn't all that much more info in the

Re: L3DSR -- Overcoming Layer 2 Limitations of Direct Server Return Load Balancing Video?

2011-07-26 Thread Jan Schaumann
Matt Hite li...@beatmixed.com wrote: Hi, Jan. It's a great presentation and I really love your approach. However, I am curious -- why was IP-in-IP not pursued? I know the presentation mentioned the MTU issue, but your final solution seemed full of enough pitfalls itself (ie -- lots of

L3DSR server side bits open sourced

2011-03-08 Thread Jan Schaumann
Hello, Some of you may remember my talk at Nanog51 about L3DSR (http://nanog.org/meetings/nanog51/presentations/Monday/NANOG51.Talk45.nanog51-Schaumann.pdf). I had promised that we'd try to get the server side bits released soon. While it took longer than anticipated, I'm glad to be able to

RCN dns contact

2008-12-18 Thread Jan Schaumann
Hi, If there's somebody from RCN on this list who I can talk to about their DNS (specifically about records that are too large for UDP and fall back to TCP), please contact me. Thanks, -Jan pgpwbzESDAjBY.pgp Description: PGP signature