[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[icann-europe] Re: [ecdiscuss] Re: [icann-europe] European Root Server System



Christian and all,

Christian de Larrinaga wrote:

> Jeff you are at cross purposes to the subject. I was simply saying security
> is weakened if the DNS implementation permits the same name to be registered
> multiple times. This is true for distributed as well as hierarchical DNS
> delegation topologies.

  Yes you would be correct except that Multi-Roots and SROOTS does
not permit the same name to be registered on separate or multiple
root structures.

>
>
> This was a theoretical fear until proven by .biz and others.
>
> If you have some running code for a distributed architecture that can scale
> well beyond 800+ to say 800 million or even better still to several billion
> and maintain universality, support for all dependant applications of DNS
> then we should see that RFC from you.

  The RFC is not yet available.  But and IETF document is as well as
several private sector efforts.
See:http://search.ietf.org/internet-drafts/draft-ietf-dnsop-ohta-shared-root-server-01.txt

for some basic background.

>
>
> Christian
>
> > -----Original Message-----
> > From: Jeff Williams [mailto:jwkckid1@ix.netcom.com]
> > Sent: Monday, April 22, 2002 03:47
> > To: cdel@firsthand.net
> > Cc: Vittorio Bertola; Jefsey Morfin; icann-europe@lists.fitug.de;
> > ecdiscuss@ec-pop.org
> > Subject: Re: [ecdiscuss] Re: [icann-europe] European Root Server System
> >
> >
> > Christian and all,
> >
> > Christian de Larrinaga wrote:
> >
> > > The Root servers are assigned to where there is most traffic flow.
> > >
> > > Increase your traffic flow locally and you increase the
> > likelyhood of having
> > > local root servers.  If you want an A root delegation then we
> > have to see
> > > ccTLD's and ICANN come to terms as a first precondition.
> > >
> > > If we split into separate roots then we split the internet, increase
> > > security risks and lose universality.
> >
> >   Actually the opposite is true Christian.  With S-Roots (Shared Root)
> > you have increased security and no single point of failure as well.
> > Same is true with Shared Registries for DNS.  Some 800+ name
> > servers are already running one of another version of "Shared Roots"
> > with modified Bind now from my last count..  We also already have
> > Inclusive and Competitive Registries such as ORSC which has been
> > around for several years now and can be linked in on Shared
> > Roots at any time...
> >
> > > So a bad idea for europe, africa asia
> > > and americas including the Pentagon.
> > >
> > > Christian de Larrinaga
> > >
> > > > -----Original Message-----
> > > > From: Vittorio Bertola [mailto:vb@vitaminic.net]
> > > > Sent: Monday, April 22, 2002 10:31
> > > > To: Jefsey Morfin
> > > > Cc: icann-europe@lists.fitug.de; ecdiscuss@ec-pop.org
> > > > Subject: [ecdiscuss] Re: [icann-europe] European Root Server System
> > > >
> > > >
> > > > On Sun, 21 Apr 2002 19:22:33 +0200, Jefsey Morfin <jefsey@wanadoo.fr>
> > > > wrote:
> > > >
> > > > >I am interested in the cond and pros about a European parallel
> > > > root sever
> > > > >system.
> > > > >
> > > > >IMHO the current US cybersecurity study of Richard Clarke
> > will show the
> > > > >need that the Pentagon has claimed a few times already of an
> > all US root
> > > > >server system. I think we should consider our own root server
> > > > system as a
> > > > >contingency plan.
> > > >
> > > > I absolutely don't like the idea of breaking the Internet in parts,
> > > > but given that the Internet is now a vital infrastructure for
> > > > economical development and for national security, it doesn't seem
> > > > likely that the US government releases any control over it in the
> > > > short term, even if to a true international organisation, and I don't
> > > > think that the EU should continue accepting the US ruling over it,
> > > > especially in the present situation where US delegates a part of it to
> > > > ICANN which in turns not only fails, but actively refuses to grant
> > > > adequate representation to the public in general, and to establish any
> > > > real means of participation for non-English-speaking communities.
> > > >
> > > > So I think that the EU should set up both a parallel root system and a
> > > > parallel organisation to ICANN (at least, to the current US-controlled
> > > > ICANN), and then such organisation and US-ICANN could agree to
> > > > maintain the two systems synchronised, or even to establish a small
> > > > overlying council to decide worldwide policy when necessary (based on
> > > > the principle that decisions should be taken locally as much as
> > > > possible). So the EU root, in case of need, could be used in the
> > > > interest of European citizens and economies - not, when they collide,
> > > > in the interest of the US ones.
> > > >
> > > > My opinion, of course, might change if ICANN became a truely open and
> > > > international organization. But anyway, I feel the need for a
> > > > "detachable" European set of servers in case Europe ever needed to
> > > > claim its independence.
> > > > --
> > > > .oOo.oOo.oOo.oOo vb.
> > > > Vittorio Bertola     <vb@vitaminic.net>    Ph. +39 011 23381220
> > > > Vitaminic [The Music Evolution] - Vice President for Technology
> > > >
> > > > DISCLAIMER, PLEASE NOTE: This communication is intended only for
> > > > use by the
> > > > addressee. It may contain confidential or privileged information.
> > > > Transmission, distribution and/or copy cannot be permitted.
> > Please notify
> > > > immediately the sender by replying if you are not the
> > intended recipient.
> > > >
> >
> > Regards,
> >
> > --
> > Jeffrey A. Williams
> > Spokesman for INEGroup - (Over 121k members/stakeholdes strong!)
> > CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng.
> > Information Network Eng. Group. INEG. INC.
> > E-Mail jwkckid1@ix.netcom.com
> > Contact Number:  972-244-3801 or 214-244-4827
> > Address: 5 East Kirkwood Blvd. Grapevine Texas 75208
> >
> >
> >
> >

Regards,
--
Jeffrey A. Williams
Spokesman for INEGroup - (Over 121k members/stakeholdes strong!)
CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng.
Information Network Eng. Group. INEG. INC.
E-Mail jwkckid1@ix.netcom.com
Contact Number:  972-244-3801 or 214-244-4827
Address: 5 East Kirkwood Blvd. Grapevine Texas 75208



-- 
To unsubscribe, e-mail: icann-europe-unsubscribe@lists.fitug.de
For additional commands, e-mail: icann-europe-help@lists.fitug.de