Dan York

Just a guy in Vermont trying to connect all the dots...

Author's posts

Watch Live Today at 13:00 US EST – DNSSEC Root KSK Ceremony 19

IANA logoIf you are interested in understanding a bit more about how the overall DNSSEC infrastructure operates, you can watch the “Root DNSSEC KSK Ceremony 19″ live today, November 20, 2014, from a data center in Culpeper, Virginia, USA, starting at 1:00 pm US Eastern time, which is 18:00 UTC.  All the information and the link to the live stream can be found at:

https://www.iana.org/dnssec/ceremonies/19

The key ceremonies are part of the activities performed by the Internet Corporation for Assigned Names and Numbers (ICANN) under its contract to operate the Internet Assigned Numbers Authority (IANA). As explained on the overview page:

Ceremonies are usually conducted four times a year to perform operations using the Root Key Signing Key, and involving Trusted Community Representatives. In a typical ceremony, the KSK is used to sign a set of operational ZSKs that will be used for a three month period to sign the DNS root zone. Other operations that may occur during ceremonies include installing new cryptographic officers, replacing hardware, or generating or replacing a KSK.

This ceremony today is to use the “master” root Key Signing Key (KSK) to generate a set of Zone Signing Keys (ZSKs) that will then be used until the next key ceremony.

There is a complete script that outlines the overall process that is used by ICANN to perform this operation today.  In the interest of transparency there is also a live video stream that will show the entire process and that will be archived for later viewing.

The “root key” is at the top of the “global chain of trust” that is used to ensure the correct validation of DNSSEC signatures (for more info see “The Two Sides of DNSSEC“) and so it is critical that the security and integrity of this root key be maintained.  Ceremonies such as the one today are a part of that effort.  If you are interested in learning more, today is a bit of a peek behind the curtain about how all of this happens…

P.S. If you want to learn more about how to get started with DNSSEC, please visit our “Start Here” page to find resources focused on your type of role or organization.

Testing Out Writing in Markdown

This is a top heading

This is some random text that I’m including purely for the sake of having some text here.

This is some more random text.

This should be a next level heading.

And here is some text from Bacon Ipsum:

Bacon ipsum dolor amet venison filet mignon tenderloin, short ribs jerky chuck pancetta pig pork chop. Tri-tip pastrami sausage tail, meatball shank spare ribs bacon jerky corned beef pig alcatra ball tip cow. Turkey bacon meatball brisket hamburger kielbasa. Pig chuck ground round cupim. Landjaeger tail boudin, shank pork belly ribeye biltong meatball sausage bresaola rump hamburger beef ribs pork chop. Ribeye doner capicola, shoulder rump prosciutto ground round pork loin kevin pork chop turkey pork belly shankle beef ribs corned beef. Ball tip ribeye hamburger bresaola.

Another 2nd-level heading

Brisket cow t-bone shank. Porchetta hamburger beef ribs, meatball biltong cow doner swine bacon shankle ribeye. Ground round andouille ham hock, sirloin t-bone tail rump prosciutto ham short loin spare ribs filet mignon. Short loin fatback pork chop, picanha short ribs ground round beef ham. Turducken short loin flank prosciutto salami.

And some bullets:

  • bacon

  • steak

  • turducken

Brisket tail ham hock, short loin jowl ribeye prosciutto shankle boudin landjaeger picanha. Turkey ribeye sirloin shoulder short ribs bacon sausage. Leberkas beef ribs beef shoulder fatback hamburger chuck ham sirloin pig short ribs shankle. Spare ribs bresaola ham hock, leberkas corned beef turkey picanha venison ham jerky sirloin hamburger boudin. Turkey landjaeger pork belly, ball tip hamburger rump swine.


Doner chicken pig porchetta beef ribs fatback cow jowl boudin short ribs landjaeger. Turkey drumstick brisket strip steak hamburger. Pork belly andouille pork shank venison salami tail ball tip shankle flank chuck. Drumstick prosciutto turkey pastrami ground round turducken cupim brisket leberkas kielbasa. Picanha tongue shank meatball, landjaeger turkey pork loin cow kevin tenderloin.

Nominations For Board of Public Interest Registry (Operator of .ORG) Close Nov 24 (Featured Blog)

Would you be interested in helping guide the future of the Public Interest Registry (PIR), the non-profit operator of the .ORG domain? If so, the Internet Society is seeking nominations for three positions on the PIR Board of Directors. The nominations deadline is Monday, November 24, 2014. More information, qualification requirements and the submission form can be found here. More...

Nominations For Board of Public Interest Registry (operator of .ORG) Close Nov 24 (Featured Blog)

More...

TDYR 185 – Lessons Learned About Public Speaking With Japanese Translation

At our ION Tokyo event this week, I learned a good bit from talking with Japanese translators who then translated my talk... More info about the event: http://www.internetsociety.org/deploy360/ion/tokyo2014/

Congrats to FreeBSD On Their $1 Million Donation

FreeBSD Foundation logoWow! Many congratulations to the folks at the FreeBSD Foundation for receiving a generous $1 million donation from Jan Koum, CEO and Co-Founder of WhatsApp.

And of course many, MANY thanks to Jan Koum for giving back in this way!  As he states in his Facebook post (reprinted in that link above), the FreeBSD operating system helped him get started in his career and got him to where he is today.  This is a wonderful recognition of the power of open source operating systems – and it is wonderful that Jan Koum made this donation.

While most of the UNIX-related work in my life has been focused around Linux versus FreeBSD, I’ve used FreeBSD on a number of projects and found it quite good.  From a strategic point of view, I’m glad to see this donation to the FreeBSD Foundation to help advance its own plans.  Much of the world’s attention to “open source” matters focuses around Linux – and Linux receives the majority of corporate support and donations. But the Internet thrives on diversity and it is great to have a strong set of operating systems out there.  This donation is good for the health of the overall Internet and the open source ecosystem.

Kudos to Jan Koum for making this donation now that he has risen to such a successful point in his life where he can make a donation like this.  I hope he will inspire others who are in such situations to do so as well!

Norway’s .NO ccTLD Now Signed With DNSSEC

Norway’s .NO became the latest country-code top-level-domain (ccTLD) to be completely integrated into DNSSEC’s global chain of trust with the publication of their DS record in the root zone of DNS over the weekend. As noted in the tweet below (and an earlier one), the team in Norway is rather excited about this event!

I don’t know that I’ve seen anyone bake a cake before to celebrate the signing of a top-level domain, but this is pretty cool!

Congratulations to the team at .NO that made this happen!  We’ve updated the DNSSEC deployment maps with the info so that Norway now shows up in a “green” status.

On a page about DNSSEC on the Norid web site, they indicate that they will start accepting DNSSEC records on 9 December 2014.  This means that .NO domain registrants will very soon be able to experience the higher security of DNSSEC and DANE!

If you would like to learn more about how you can secure your domain with DNSSEC, please visit our Start Here page to find resources targeted at your type of organization.

FIR #782 – 11/17/14 – For Immediate Release

FIR is in a new podcast directory; please rate us in iTunes; Quick News: Google Glass's clouded future, beware of domain laundering, is YouTube the new television?, troubling results from popular podcast; Ragan promo; News That Fits: why does nobody ask what could go wrong?, Dan York's Tech Report, study reveals privacy say-do gap, Media Monitoring Minute from CustomScoop, listener comments, Facebook organic reach is not dead yet, Igloo Software promo, the past week on the FIR Podcast Network; music from Adri-Anne Ralph; and more.

Watch LIVE Right Now From Japan: ION Tokyo – IPv6, DNSSEC and BCOP

Want to learn the latest news about IPv6, DNSSEC, and Best Current Operational Practice (BCOP) efforts? Please join us on Monday, 17 November 2014, at 9:30am JST (00:30 UTC / 19:30 EST), when our ION Tokyo event will be streaming live out of Japan via this link:

http://www.ustream.tv/channel/ion-tokyo

ION Tokyo has just started in Japan and will go for the next 2.5 hours – please join us:

ION Tokyo - Chris Grundemann

The ION Tokyo agenda is packed with great sessions:

  • Keynote: Can We Go Back to the Original? A Return to the End-to-End Principle
    Dr. Shin Miyakawa (NTT Communications)
  • The Business Case for Implementing DNSSEC
    Dan York (Internet Society)
  • Best Current Operational Practices Update
    Chris Grundemann (Internet Society)
  • Panel Discussion – IPv6 in Asia Pacific: Untangling the Web
    Moderator: Tomohiro Fujisaki (Internet Society Japan).
    Panelists: Miwa Fujii (APNIC); Toshio Hiraga (Sony Global Solutions, Inc.); Kaname Nishizuka; Akihiro Tsuru (KDDI Corporation).

Our Sponsors

We would like to once again thank Afilias for supporting ION Tokyo as an ION Conference series sponsor!

In addition, we’re honored to have several co-location partners at this event including IA Japan, the IPv6 Promotion Council, JPNIC, and the ISOC Japan Chapter.

Join Us

Will you be in Tokyo next week for any of the many excellent events happening? Please be sure to let us know! You can respond to the Facebook or Google+ events, drop us a message on FacebookTwitter, or Google+ (using the hashtag #IONConf), or simply email us.

We can’t wait to see you in Japan – or online – as we continue to share real-world deployment experiences and work to better understand your needs to get things like IPv6, DNSSEC, TLS, and secure routing deployed.

Join us Monday for what should be an excellent set of sessions!

And if you want to get started now with deploying these technologies, please visit our “Start Here” page to find resources targeted at your type of organization or role.

TDYR 184 – Initial Thoughts On Landing in Tokyo (And Fun With Dinner Menus)

I landed in Tokyo, Japan, last night and just reflect here on my first impressions on my first visit to Japan...