[dns-operations] 答复: L-Root IPv6 Address renumbering

[Terry Manderson]

On 14/03/2016, 12:36 PM, "Paul Vixie" <paul at redbarn.org> wrote:

>
>
>Terry Manderson wrote:
>>
>> The L-root operator (ICANN) will stop serving from the old IPv6 address.
>> It's well past time we stopped treating resolver operators like
>>children.
>>
>
>this raises two questions.
>
>is that icann's position speaking for the root server system overall, or
>is that the l-root operator's position (who happens to be an icann
>employee?)

It is the position of L-root alone. (who happens to be an ICANN employee)
(all of the root server letters are run by independent organisations and I
certainly do not speak for them, nor the whole root server system)

>
>what precautions will be made to prevent traffic destined for the old
>address from falling into commercial or government surveillance hands?

No more or less that what is done for any other root service prefix.
(longer term monitoring for hijack etc)
We continue to hold the prefix, we may not announce the prefix, however
(as we all know) it is nigh on impossible to stop someone snooping the
wire.

> 
>(could you perhaps arrange for dns-oarc to collect the query traffic and
>make it available for research purposes?)

I have no objections to that at all. Happy to liaise with DNS-OARC.

T.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6343 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20160314/a2557fc0/attachment.bin>