<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div><span class="Apple-style-span" style="font-size: 15px; "><b>Reminder: Call for Participation -- ICANN DNSSEC Workshop 10 April 2013</b></span></div><span id="OLK_SRC_BODY_SECTION"><div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div><span class="Apple-style-span" style="font-size: 15px; "><span id="OLK_SRC_BODY_SECTION"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; "><span class="Apple-style-span" style="font-family: Calibri, Verdana, Helvetica, Arial; "><br></span></div><div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; "><span class="Apple-style-span" style="font-family: Calibri, Verdana, Helvetica, Arial; ">The DNSSEC Deployment Initiative, in cooperation with the ICANN Security and Stability Advisory Committee
(SSAC), is planning a DNSSEC Workshop at the ICANN meeting in Beijing, China on 10 April 2013. The DNSSEC Workshop has been a part of ICANN meetings for several years and has provided a forum for both experienced and new people to meet, present and discuss
current and future DNSSEC deployments. For reference, the most recent session was held at the ICANN Toronto meeting on 17 October 2012. The presentations and transcripts are available at </span><a href="http://toronto45.icann.org/node/34375">http://toronto45.icann.org/node/34375</a>. </div><font face="Calibri,Verdana,Helvetica,Arial" style="font-family: Calibri, sans-serif; "><br>
We are seeking presentations on the following topics:<br><br>
1. DNSSEC Activities in Asia Pacific<br></font><font face="Calibri,Verdana,Helvetica,Arial" style="font-family: Calibri, sans-serif; ">For this panel we are seeking participation from those who have been involved in DNSSEC deployment in the Asia Pacific region as well as those who have a keen interest
in the challenges and benefits of deployment. <font>Key</font> questions are to consider include: What would help to promote DNSSEC deployment? What are the challenges you have faced when you deployed DNSSEC? <br><br>
2. The <font class="Apple-style-span">Operational </font>Realities of Running DNSSEC<br>
Now that DNSSEC has become an operational norm for many registries, registrars, and ISPs, what have we learned about how we manage DNSSEC? What's best practice around key rollovers? How often do you review your disaster recovery procedures? Is there operational
familiarity within your customer support teams? Has DNSSEC made DNS more 'brittle' or is it just a run-of-the-mill operational practice? What operational statistics have we gathered about DNSSEC? Is it changing DNS patterns? How are our nameservers handling
DNSSEC traffic? Is the volume as expected? Have we seen anything unusual? Are there experiences being documented in the form of best practices, or something similar, for transfer of signed zones?<br><br>
3. DNSSEC and Enterprise Activities<br>
DNSSEC has always been seen as a huge benefit to organizations looking to protect their identity and security on the Web. Large enterprises are an obvious target for DNS hackers and DNSSEC provides an ideal solution to this challenge. This session aims to look
at the benefits and challenges of deploying DNSSEC for major enterprises. Topics for discussion:<br></font><ul style="font-family: Calibri, sans-serif; "><li><font face="Calibri,Verdana,Helvetica,Arial">What is the current status of DNSSEC deployment among enterprises?</font></li><li><font face="Calibri,Verdana,Helvetica,Arial">What plans do the major enterprises have for their DNSSEC roadmaps?</font></li><li><font face="Calibri,Verdana,Helvetica,Arial">What are the challenges to deployment for these organizations? Do they foresee raising awareness of DNSSEC with their customers?</font></li></ul><font face="Calibri,Verdana,Helvetica,Arial" style="font-family: Calibri, sans-serif; ">4. When Unexpected DNSSEC Events Occur<br>
What have we learned from some of the operational outages that we have seen over the past 18 months? Are there lessons that we can pass on to those just about to implement DNSSEC? How do you manage dissemination of information about the outage? What have you
learned about communications planning? Do you have a route to ISPs and registrars? How do you liaise with your CERT community?</font></div></div></div></span></span><div style="font-size: 14px; "><span class="Apple-style-span" style="font-size: 15px; "><br></span></div><div style="font-size: 14px; "><font class="Apple-style-span" style="font-size: 15px; ">5. Preparing for Root Key Rollover</font></div><span id="OLK_SRC_BODY_SECTION" style="font-size: 15px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div><font face="Calibri,Verdana,Helvetica,Arial" style="font-family: Calibri, sans-serif; ">For this topic we are seeking input on issues relating to root key rollover. In particular, we are seeking comments from vendors, ISPs, and the community that will
be affected by distribution of new root keys<br></font></div></div></div></span><div><br></div><span id="OLK_SRC_BODY_SECTION" style="font-size: 15px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div><font face="Calibri,Verdana,Helvetica,Arial" style="font-family: Calibri, sans-serif; ">6. DNSSEC: Regulative, Legislative and Persuasive Approaches to Encouraging Deployment</font></div></div></div></span><div><p class="MsoNormal" style="font-size: 14px; margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-family: Calibri, sans-serif; "><font class="Apple-style-span" style="font-size: 15px; ">There are many models in discussion for encouraging the take-up of DNSSEC amongst TLDs. In some jurisdictions we have seen governmental edicts insisting that DNSSEC is deployed across a Top Level Domain.
In others, we have seen reports produced for governments highlighting the lack of take up and the need for tighter control amongst operators. Recently, we have witnessed the consideration of mandated DNSSEC signing of zones by some TLDs in order to gain access
to newer premium domains. Have any of these approaches worked in encouraging take up of DNSSEC? What role does a national government have in assisting deployment of DNSSEC? How are some of these measures perceived by registrars, DNS operators, ISPs and registrants?</font></p></div><span id="OLK_SRC_BODY_SECTION" style="font-size: 15px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div><font face="Calibri,Verdana,Helvetica,Arial" style="font-family: Calibri, sans-serif; "><br>
7. DANE and Other DNSSEC Applications<br>
Using DNSSEC as a means of authentication for http transactions is an exciting development of DNSSEC. What is the progress of the DNS-Based Authentication of Named Entities (DANE) initiative? (See <font color="#0000FF" style="color: rgb(0, 0, 0); "><u><a href="http://datatracker.ietf.org/wg/dane/">http://datatracker.ietf.org/wg/dane/</a>.</u></font>)
How soon could DANE become a deployable reality and what will be the impact of such a deployment, e.g. impact on traditional certification authorities (CAs)?</font></div></div></div></span><div style="font-size: 14px; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; "><span class="Apple-style-span" style="font-size: 15px; "><br></span></div><div style="font-size: 14px; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; "><span class="Apple-style-span" style="font-size: 15px; ">8. Use of DNSSEC in the Reverse Space</span></div><div style="font-size: 14px; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; "><span class="Apple-style-span" style="font-size: 15px; ">This topic includes signed reverse zones, security products using reverse DNS lookup for DNSSEC validation? </span></div><span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-size: 15px; font-family: Calibri, sans-serif; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-family: Calibri, sans-serif; "><div style="font-family: Calibri, sans-serif; "><font face="Calibri,Verdana,Helvetica,Arial"><br></font></div><div style="font-family: Calibri, sans-serif; "><font face="Calibri,Verdana,Helvetica,Arial">9. The Great DNSSEC Panel Quiz</font></div><div style="font-family: Calibri, sans-serif; "><font face="Calibri,Verdana,Helvetica,Arial">Ever fancied pitting your wits against your colleagues? Demonstrate your knowledge and expertise in DNSSEC in our Great DNSSEC Panel Quiz.<br><br>
In addition, we welcome suggestions for additional topics. </font></div><div style="font-family: Calibri, sans-serif; "><font face="Calibri,Verdana,Helvetica,Arial"><br></font></div><div style="font-family: Calibri, sans-serif; "><font face="Calibri,Verdana,Helvetica,Arial">If you are interested in participating, please send a brief (1-2 sentence) description of your proposed presentation </font><span class="Apple-style-span" style="font-family: Calibri, Verdana, Helvetica, Arial; ">to <a href="mailto:dnssec-beijing@shinkuro.com">dnssec-beijing@shinkuro.com</a> </span><span class="Apple-style-span" style="font-family: Calibri, Verdana, Helvetica, Arial; ">by <b>**15
January 2013.**</b></span></div><div style="font-family: Calibri; "><font><br><font class="Apple-style-span" face="Calibri,sans-serif">We hope that you can join us.</font><br><br><font class="Apple-style-span" face="Calibri,sans-serif">Thank you,</font><br><br><font class="Apple-style-span" face="Calibri,sans-serif">Julie Hedlund</font><br><br>
On behalf of the DNSSEC Workshop Program Committee:<br>
Steve Crocker, Shinkuro</font></div><div style="font-family: Calibri; ">Jacques Latour, .CA</div></div></span><div style="font-size: 14px; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; "><span class="Apple-style-span" style="font-size: 15px; ">Xiaodong Lee, ICANN</span></div><span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-size: 15px; font-family: Calibri, sans-serif; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-family: Calibri, sans-serif; "><div style="font-family: Calibri; ">Simon McCalla, Nominet UK<br>
Russ Mundy, Sparta/Parsons</div><div style="font-family: Calibri; ">Ondřej Surý, CZ.NIC<font><br></font><font>Lance Wolak, .ORG, The Public Interest Registry</font></div></div></span><div style="font-size: 14px; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; "><span class="Apple-style-span" style="font-size: 15px; ">Yoshiro Yoneya, JPRS</span></div></div></div></div></span></body></html>