FYI - RIPE seems to be getting ready to deploy DNSSEC on inaddr (rdns) tree so I thought nanog folks might want to know about it too being the kind operational issue that we don't seem to be discussing here lately quite as much... BTW - are there any plans to deploy DNSSEC for ARIN ip dns tree and if so when are the good people at ARIN planning to tell about it? And perhaps presentation about DNSSEC on ip dns tree and how it is being handled and what we should be ready for maybe good to have at upcoming NANOG meeting. ---------- Forwarded message ---------- Date: Mon, 12 Sep 2005 09:39:48 +0200 From: Henk Uijterwaal <henk@ripe.net> To: dns-wg@ripe.net, db-wg@ripe.net Subject: [db-wg] DNSSEC deployment on the reverse tree. Dear Colleagues, In June, Olaf Kolkman wrote:

The RIPE NCC has been involved with the development of the DNSSEC protocol. Now that the protocol has become available, we plan to implement DNSSEC on our domains in the reverse DNS tree. The deployment of DNSSEC is the second and last phase of the Reverse DNS restructuring project. [...] We welcome your feedback on this poposal before 1 August 2005. Please send your comments to the DNS Working Group Mailing List.

The comment period was extended to 1 September and some comments were posted to the list. These have all been incorporated and the new documents are at:

You can find the proposed policy at:

<http://www.ripe.net/rs/reverse/dnssec/draft-dnssec-policy.html>http://www.ripe.net/rs/reverse/dnssec/draft-dnssec-policy.html. "DNSSEC Key Maintenance Procedure"

<http://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html>http://www.ripe.net/rs/reverse/dnssec/key-maintenance-procedure.html "Procedure for Requesting DNSSEC Delegations"

<http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html>http://www.ripe.net/rs/reverse/dnssec/registry-procedure.html

I'm going to suggest to the chairs of the WG to do a last call on these documents and have them published as RIPE documents. Kind regards, Henk ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal(at)ripe.net RIPE Network Coordination Centre http://www.amsterdamned.org/~henk P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ Look here junior, don't you be so happy. And for Heaven's sake, don't you be so sad. (Tom Verlaine)