[dns-operations] New addresses for b.root-servers.net

[Mukund Sivaraman]

On Tue, May 30, 2023 at 12:16:28PM -0400, Robert Story wrote:
> USC/ISI is renumbering both its IPv4 and IPv6 addresses for
> b.root-servers.net on 2023-11-27. Our new IPv4 address will be
> 170.247.170.2 and our new IPv6 address will be 2801:1b8:10::b.

FWIW, I suggest that implementors/operators download the new version of
the root hints after 2023-11-27 from IANA using an authenticated
transport such as HTTPS instead of using addresses from an
unauthenticated email message/sender.

When we created internal tickets to track this B renumbering, Jinmei
pointed out that though there are defences against cases such as
poisoning from an address in rogue hands, for serious operation it's
important for safety to keep the builtin/installed static hints current
regardless of whether a resolver does priming.

		Mukund
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20230603/1df1d48b/attachment.sig>