Re: [dns-operations] It's begun...

2013-10-24 Thread Chris Thompson
At 13:01 23-10-2013, Edward Lewis wrote: My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added between 1800 and 1900 UTC. Not mentioned yet is that all four appeared already signed and with DS records in the root zone. But... the two Cyrillic gTLDs (xn--80asehdb & xn--80a

Re: [dns-operations] It's begun...

2013-10-24 Thread Dan York
On 10/24/13 9:12 AM, "Chris Thompson" wrote: >At 13:01 23-10-2013, Edward Lewis wrote: >>My sensors show 4 new gTLDs in the last hour or so...IDN, >>non-ccTLD...added between 1800 and 1900 UTC. > >Not mentioned yet is that all four appeared already signed and with >DS records in the root zone.

Re: [dns-operations] It's begun...

2013-10-24 Thread Mark Andrews
It helps to return the NSEC3 record that proves that the wildcard name does not exist. 25-Oct-2013 00:36:21.420 validating @0x7fc374c8dc00: www.xn--80aswg DS: in authvalidated 25-Oct-2013 00:36:21.420 validating @0x7fc374c8dc00: www.xn--80aswg DS: resuming nsecvalidate 25-Oct-2013 00:36:21.

Re: [dns-operations] It's begun...

2013-10-24 Thread Stephane Bortzmeyer
On Wed, Oct 23, 2013 at 01:11:43PM -0700, Rick Wesson wrote a message of 100 lines which said: > Does ICANN have a root-zone announce list? Email lists are so last-century :-) IANA has Twitter ___ dns-operations ma

Re: [dns-operations] It's begun...

2013-10-24 Thread Stephane Bortzmeyer
On Thu, Oct 24, 2013 at 02:12:10PM +0100, Chris Thompson wrote a message of 28 lines which said: > Neither dnssec-debugger.verisignlabs.com nor dnsviz.net are able to > analyse validations problems for NXDOMAIN responses, DNSviz does not do it by default but you can activate it ("DNSSEC optio

Re: [dns-operations] It's begun...

2013-10-24 Thread Joe Abley
On Oct 24, 2013, at 09:56, Stephane Bortzmeyer wrote: > On Wed, Oct 23, 2013 at 01:11:43PM -0700, > Rick Wesson wrote > a message of 100 lines which said: > >> Does ICANN have a root-zone announce list? > > Email lists are so last-century :-) IANA has Twitter >

[dns-operations] What do you call them?

2013-10-24 Thread Edward Lewis
Throwing this out on the table for discussion... In the sense we (the dns operations industry/community) see ".com" and can say that out loud today (whether it's native tongue to you or not). Ane when we see "xn--fiqs8s" we can call that the "IDN for China (simplified)" But what will we call

Re: [dns-operations] What do you call them?

2013-10-24 Thread Marco Davids (SIDN)
On 10/24/13 16:08, Edward Lewis wrote: > Throwing this out on the table for discussion... > > In the sense we (the dns operations industry/community) see ".com" and > can say that out loud today Or type it. I mean, searching on http://www.iana.org/domains/root/db hasn't become much easier eith

Re: [dns-operations] What do you call them?

2013-10-24 Thread Phil Regnauld
Edward Lewis (ed.lewis) writes: > > That's "you1xi4" in pinyin (I'll omit the characters as they might not render > in all email readers) [...] > So - what will the dns operations community use to name these TLDs when there > are issues with the new gTLDs that are in the xn-- "category

Re: [dns-operations] It's begun...

2013-10-24 Thread Chris Thompson
On Oct 24 2013, Dan York wrote: On 10/24/13 9:12 AM, "Chris Thompson" wrote: At 13:01 23-10-2013, Edward Lewis wrote: My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added between 1800 and 1900 UTC. Not mentioned yet is that all four appeared already signed and with

Re: [dns-operations] It's begun...

2013-10-24 Thread Peter Koch
On Thu, Oct 24, 2013 at 01:20:48PM +, Dan York wrote: [1] > >From a DNSSEC-advocacy point of view, this is a great step forward as all > new domains registered under these newgTLDs will at least have the > *option* of being secured by DNSSEC. [2] > Hmmm... interesting. Perhaps some work is s

Re: [dns-operations] It's begun...

2013-10-24 Thread Marco Davids (SIDN)
Hi, On Wed, Oct 23, 2013 at 01:11:43PM -0700, Rick Wesson wrote: > Does ICANN have a root-zone announce list? https://mm.icann.org/mailman/listinfo/gtldnotification perhaps? Meanwhile practising on my pronunciation: http://translate.google.com/#auto/nl/%E6%B8%B8%E6%88%8F 'Yoshi' or somethin

Re: [dns-operations] It's begun...

2013-10-24 Thread Anne-Marie Eklund-Löwinder
> -Ursprungligt meddelande- > Från: dns-operations-boun...@lists.dns-oarc.net [mailto:dns-operations- > boun...@lists.dns-oarc.net] För Stephane Bortzmeyer > Skickat: den 24 oktober 2013 15:56 > Till: Rick Wesson > Kopia: DNS Operations; Edward Lewis > Ämne: Re: [dns-operations] It's begu

Re: [dns-operations] It's begun...

2013-10-24 Thread Chris Thompson
On Oct 24 2013, I wrote: [...] Part of the problem is that only one NSEC3 record is returned - the one covering the zone apex, which doesn't necessarily cover the name queried for. But validation seems to fail even in cases when the name is so covered. Ah - Mark Andrews' post points out why th

Re: [dns-operations] What do you call them?

2013-10-24 Thread David C Lawrence
Edward Lewis writes: > So - what will the dns operations community use to name these TLDs when > there are issues with the new gTLDs that are in the xn-- "category" ? I confess I'm confused by the question. In email I expect writing between people who are not conversant in the language in questio

[dns-operations] All NSs for a TLD being in the TLD itself

2013-10-24 Thread Paul Hoffman
The new records for one of the shiny new gTLDs are: xn--ngbc5azd. 172800 IN NS a.nic.xn--ngbc5azd. xn--ngbc5azd. 172800 IN NS b.nic.xn--ngbc5azd. xn--ngbc5azd. 172800 IN NS c.nic.xn--ngbc5azd. xn--ngbc5azd. 172800 IN NS

Re: [dns-operations] All NSs for a TLD being in the TLD itself

2013-10-24 Thread Marco Davids (SIDN)
On 10/24/13 16:54, Paul Hoffman wrote: > The new records for one of the shiny new gTLDs are: > > This works, of course, but it feels a bit fragile for me. To me it feels pretty lean and mean: http://trans-trust.verisignlabs.com/pix/xn--ngbc5azd.-names.png > Is there a history of this being unsa

Re: [dns-operations] All NSs for a TLD being in the TLD itself

2013-10-24 Thread Frederico A C Neves
On Thu, Oct 24, 2013 at 04:59:36PM +0200, Marco Davids (SIDN) wrote: > On 10/24/13 16:54, Paul Hoffman wrote: > > The new records for one of the shiny new gTLDs are: > > > > This works, of course, but it feels a bit fragile for me. > > To me it feels pretty lean and mean: > > http://trans-trust.

Re: [dns-operations] All NSs for a TLD being in the TLD itself

2013-10-24 Thread Chris Thompson
On Oct 24 2013, Paul Hoffman wrote: The new records for one of the shiny new gTLDs are: xn--ngbc5azd. 172800 IN NS a.nic.xn--ngbc5azd. xn--ngbc5azd. 172800 IN NS b.nic.xn--ngbc5azd. xn--ngbc5azd. 172800 IN NS c.nic.xn--ngbc5azd. xn-

Re: [dns-operations] It's begun...

2013-10-24 Thread Stephane Bortzmeyer
On Thu, Oct 24, 2013 at 04:33:52PM +0200, Anne-Marie Eklund-Löwinder wrote a message of 39 lines which said: > Twitter is so last year. IANA notifications over 4chan? Or am I so late I don't even know the trend of the day? ___ dns-operatio

Re: [dns-operations] It's begun...

2013-10-24 Thread Michele Neylon - Blacknight
On 24 Oct 2013, at 17:05, Stephane Bortzmeyer wrote: > On Thu, Oct 24, 2013 at 04:33:52PM +0200, > Anne-Marie Eklund-Löwinder wrote > a message of 39 lines which said: > >> Twitter is so last year. > > IANA notifications over 4chan? Or am I so late I don't even know the > trend of th

Re: [dns-operations] It's begun...

2013-10-24 Thread Phil Regnauld
Michele Neylon - Blacknight (michele) writes: > > IANA notifications over 4chan? Or am I so late I don't even know the > > trend of the day? > > Maybe there’s a new medium that we’ve all missed :) Tumblr ? Publish diffs in an ARPA zone ? RSS in DNS ?

Re: [dns-operations] It's begun...

2013-10-24 Thread Rick Jones
On 10/24/2013 06:56 AM, Stephane Bortzmeyer wrote: On Wed, Oct 23, 2013 at 01:11:43PM -0700, Rick Wesson wrote a message of 100 lines which said: Does ICANN have a root-zone announce list? Email lists are so last-century :-) Never dismiss the utility of stone knives and bear skins :)

Re: [dns-operations] It's begun...

2013-10-24 Thread WBrown
> From: Stephane Bortzmeyer > IANA notifications over 4chan? Or am I so late I don't even know the > trend of the day? I keep hearing about this E-male thing, but I can't seem to figure out where to put the stamp. And he doesn't fit through the slot at the Post Office. Confidentiality Noti

Re: [dns-operations] What do you call them?

2013-10-24 Thread Jothan Frakes
When Kim mentioned we put together an "ask" of ianacann root updates, if we ("the community") were to request a root zone list be started for announcing... one opportunity we have would be to ask for fields from what the applicant furnished from the applicant guidebook in question 14, which would c

Re: [dns-operations] It's begun...

2013-10-24 Thread Brett Carr
>On 24 Oct 2013, at 14:12, Chris Thompson >mailto:c...@cam.ac.uk>> wrote: >At 13:01 23-10-2013, Edward Lewis wrote: >My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added >between 1800 and 1900 UTC. >Not mentioned yet is that all four appeared already signed and with >D

Re: [dns-operations] All NSs for a TLD being in the TLD itself

2013-10-24 Thread Jonathan Stewart
The glue records for all TLD NSes are in the root zone. What makes one label fragile, and another label robust? On Thu, Oct 24, 2013 at 10:19 AM, Chris Thompson wrote: > On Oct 24 2013, Paul Hoffman wrote: > > The new records for one of the shiny new gTLDs are: >> >> xn--ngbc5azd. 1

Re: [dns-operations] It's begun...

2013-10-24 Thread Mark Andrews
In message , Brett Carr writes: > > >On 24 Oct 2013, at 14:12, Chris Thompson > mailto:c...@cam.ac.uk>> wrote: > > > >At 13:01 23-10-2013, Edward Lewis wrote: > > >My sensors show 4 new gTLDs in the last hour or so...IDN, > non-ccTLD...added between 1800 and 1900 UTC. > > >Not mentioned yet is t

Re: [dns-operations] All NSs for a TLD being in the TLD itself

2013-10-24 Thread Wolfgang Nagele
Hi Paul, Why would this be unsafe and/or fragile? As was already mentioned the root zone has to include glue for whichever name you choose anyway, due to the position in the hierarchy - so it's just a matter of reducing unnecessary dependencies for us. Happy to hear thoughts besides the "religi

Re: [dns-operations] All NSs for a TLD being in the TLD itself

2013-10-24 Thread Andrew Sullivan
On Thu, Oct 24, 2013 at 10:53:03PM +, Wolfgang Nagele wrote: > > Why would this be unsafe and/or fragile? As was already mentioned > the root zone has to include glue for whichever name you choose > anyway, due to the position in the hierarchy This isn't strictly true. The only thing the ro