<div dir="ltr"><div dir="ltr">Well, let’s look at the real netblock, shall we? (‘cause I have nothing to hide)<br>You can see for yourself at <a href="https://dnsviz.net/d/108.158.in-addr.arpa/dnssec/">https://dnsviz.net/d/108.158.in-addr.arpa/dnssec/</a><br><br>1. There are old DS keys from .arpa to in-addr.arpa still dangling around.<br>2. 158.in-addr.arpa is still using ‘Algorithm 5’<br>3. Even though my <a href="http://158.108.0.0/16">158.108.0.0/16</a> netblock was ROAed, APNIC did not link me to the ‘reverse’ DNSsec chain:<br>3.1. Why? Because it’s a ‘Historical’ netblock, transferred from ARIN to APNIC epochs ago. So, my ‘domain’ is with NIR (thank god), my ‘netblock’ Whois is now with APNIC, but my ‘reverse’ is still with ARIN.<br>3.2. If I want to hook into the ‘reverse’ DNSsec chain, who do I send my DS key to? APNIC? ARIN?<br>3.2.1. APNIC is not the SOA of 158.in-addr.arpa.<br>3.2.2. I am no longer a ‘client’ of ARIN, the SOA of 158.in-addr.arpa.<br><br>Shall we move on to another netblock?<br><br><br>Pirawat.<br><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Feb 19, 2020 at 10:25 PM Edward Lewis <<a href="mailto:edward.lewis@icann.org">edward.lewis@icann.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-7056158457729025875WordSection1">
<p class="MsoNormal"><span style="font-size:12pt">I've been doing some examinations of ip6.arpa and in-addr.arpa as part of other work and I'd say they are pretty darn clean as they are. So I (too) am curious what would be needed as part of a "Flag Day"
level clean up.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12pt">I'm looking at the delegation information in the two zones and the information at the zones they delegate. As far as delegations from those zones to RIR run zones, I'd say they are perfect. For a while there
were two zones with misaligned NS sets, but they were "fixed" rather speedily last week. (There's no glue in the zones.)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:12pt">What I mean by "delegations from those zones to RIR run zones" means that there are a few delegations from ip6.arpa and in-addr.arpa that go to non-RIRs or are "special" (like 10.in-addr.arpa). Of those,
there are some hiccups but that is something that is best handled by addressing the individual situation. I don't see a "Flag Day" level concern - thus my curiosity above.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:12pt"><u></u> <u></u></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">On 2/14/20, 2:24 PM, "dns-operations on behalf of Ondřej Surý" <<a href="mailto:dns-operations-bounces@dns-oarc.net" target="_blank">dns-operations-bounces@dns-oarc.net</a> on behalf of
<a href="mailto:ondrej@sury.org" target="_blank">ondrej@sury.org</a>> wrote:<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<p class="MsoNormal" style="margin-left:0.5in">Hi, <u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">the DNS Flag Days initiative focus on protocol issues, and neither forward or reverse zones are in the focus.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">If you have anything specific you could bring this up here. How is the .arpa neglected?<br>
<br>
Ondrej<u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:0.5in">-- <u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:0.5in">Ondřej Surý <<a href="mailto:ondrej@sury.org" target="_blank">ondrej@sury.org</a>><u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><br>
<br>
<u></u><u></u></p>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<p class="MsoNormal" style="margin-right:0in;margin-bottom:12pt;margin-left:0.5in">
On 14 Feb 2020, at 18:22, Pirawat WATANAPONGSE <<a href="mailto:pirawat.w@ku.th" target="_blank">pirawat.w@ku.th</a>> wrote:<u></u><u></u></p>
</blockquote>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><br>
If you think my topic is irrelevant to DNS Flag Day 2020, or if someone has already mentioned it, I do apologize.<br>
<br>
My reasoning is that the campaign is lopsided; we are focusing on the ‘forward’ zones (because those are our children, bear our names, and we like to brag), but the 2 huge ‘reverse’ zones are neglected (because they are the bastard children).<br>
<br>
Anyone plans to clean up the ‘in-addr.arpa.’ and ‘ip6.arpa.’ this upcoming Flag Day? Or it is not a priority (just yet) at this moment?<br>
<br>
By the way, do not confuse properly scaffolding the (reverse) zones from populating them; from my point of view, they are separate issues. Even if you are ever going to put just one PTR into it, a properly secured, hierarchized, delegated (reverse) zone is
still crucial.<br>
<br>
<br>
My two cents’ worth,<br>
<br>
Pirawat.<u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
<p class="MsoNormal" style="margin-left:0.5in">-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"> _/_/ _/_/ _/_/ _/_/ Assist.Prof. Pirawat WATANAPONGSE, Ph.D.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"> _/_/ _/_/ _/_/ _/_/ Department of Computer Engineering<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"> _/_/ _/_/ _/_/ _/_/ Kasetsart University, Bangkhen (Main) Campus<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"> _/_/_/_/ _/_/ _/_/ Bangkok 10900, THAILAND<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"> _/_/_/_/ _/_/ _/_/ eMail:
<a href="mailto:Pirawat.W@ku.th" target="_blank">Pirawat.W@ku.th</a> or <a href="mailto:Pirawat.W@ku.ac.th" target="_blank">Pirawat.W@ku.ac.th</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"> _/_/ _/_/ _/_/ _/_/ Tel: +66 2 797 0999 extension 1417<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"> _/_/ _/_/ _/_/_/_/_/_/ Fax: +66 2 579 6245<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in">_/_/ _/_/ _/_/_/_/ <a href="http://www.cpe.ku.ac.th/~pw/" target="_blank">http://www.cpe.ku.ac.th/~pw/</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:0.5in"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-left:0.5in">_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><u></u><u></u></p>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div> _/_/ _/_/ _/_/ _/_/ Assist.Prof. Pirawat WATANAPONGSE, Ph.D.</div><div> _/_/ _/_/ _/_/ _/_/ Department of Computer Engineering</div><div> _/_/ _/_/ _/_/ _/_/ Kasetsart University, Bangkhen (Main) Campus</div><div> _/_/_/_/ _/_/ _/_/ Bangkok 10900, THAILAND</div><div> _/_/_/_/ _/_/ _/_/ eMail: <a href="mailto:Pirawat.W@ku.th" target="_blank">Pirawat.W@ku.th</a> or <a href="mailto:Pirawat.W@ku.ac.th" target="_blank">Pirawat.W@ku.ac.th</a></div><div> _/_/ _/_/ _/_/ _/_/ Tel: +66 2 797 0999 extension 1417</div><div> _/_/ _/_/ _/_/_/_/_/_/ Fax: +66 2 579 6245</div><div>_/_/ _/_/ _/_/_/_/ <a href="http://www.cpe.ku.ac.th/~pw/" target="_blank">http://www.cpe.ku.ac.th/~pw/</a></div><div><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>