[icann-europe] Re: [ecdiscuss] Re: [icann-europe] European Root Server System

[Jeff Williams <jwkckid1@ix.netcom.com>]

Christian and all,

  Yes I am very aware of RFC 3238.  It is a good work, but not yet
complete as neither was the reference I provided.  However the
Private Sector is moving as usual faster than the IETF on
MultiRoot or Shared Root structures as also with Shared
Registries.  As you may know Cisco and Oracle teamed
up in 2000 to work or both approaches as have EasyDNS.com.
We sold part of the rights to SROOTS to Microsoft in 2000
for a browser interface and they deployed it in IE 6.0 I believe.
In addition several companies in China and some telecoms in China
have had SROOTS or a version of it deployed pretty broadly
through China.com I believe.  This was documented to the UN
in 2001 if I recall correctly...  Also Karl Auerbach has been
testing a Multi Root system for DNS and IP but I don't
have a URL reference handy at the moment.

  So IETF efforts although laudable are lagging the technology curve
by at least 6 to 7 years at present in a number of areas other than
Root structures...


Christian de Larrinaga wrote:

> Jeff
>
> many thanks for the draft link. there is RFC 3258 by Ted Hardie Distributing
> Authoritative Name Servers
> April 2002.
>
> Christian
>
> > -----Original Message-----
> > From: Jeff Williams [mailto:jwkckid1@ix.netcom.com]
> > Sent: Wednesday, April 24, 2002 09:08
> > To: cdel@firsthand.net
> > Cc: Vittorio Bertola; Jefsey Morfin; icann-europe@lists.fitug.de;
> > ecdiscuss@ec-pop.org
> > Subject: Re: [ecdiscuss] Re: [icann-europe] European Root Server System
> >
> >
> > Christian and all,
> >
> > Christian de Larrinaga wrote:
> >
> > > Jeff you are at cross purposes to the subject. I was simply
> > saying security
> > > is weakened if the DNS implementation permits the same name to
> > be registered
> > > multiple times. This is true for distributed as well as hierarchical DNS
> > > delegation topologies.
> >
> >   Yes you would be correct except that Multi-Roots and SROOTS does
> > not permit the same name to be registered on separate or multiple
> > root structures.
> >
> > >
> > >
> > > This was a theoretical fear until proven by .biz and others.
> > >
> > > If you have some running code for a distributed architecture
> > that can scale
> > > well beyond 800+ to say 800 million or even better still to
> > several billion
> > > and maintain universality, support for all dependant applications of DNS
> > > then we should see that RFC from you.
> >
> >   The RFC is not yet available.  But and IETF document is as well as
> > several private sector efforts.
> > See:http://search.ietf.org/internet-drafts/draft-ietf-dnsop-ohta-s
> > hared-root-server-01.txt
> >
> > for some basic background.
> >
> > >
> > >
> > > Christian
> > >
> > > > -----Original Message-----
> > > > From: Jeff Williams [mailto:jwkckid1@ix.netcom.com]
> > > > Sent: Monday, April 22, 2002 03:47
> > > > To: cdel@firsthand.net
> > > > Cc: Vittorio Bertola; Jefsey Morfin; icann-europe@lists.fitug.de;
> > > > ecdiscuss@ec-pop.org
> > > > Subject: Re: [ecdiscuss] Re: [icann-europe] European Root
> > Server System
> > > >
> > > >
> > > > Christian and all,
> > > >
> > > > Christian de Larrinaga wrote:
> > > >
> > > > > The Root servers are assigned to where there is most traffic flow.
> > > > >
> > > > > Increase your traffic flow locally and you increase the
> > > > likelyhood of having
> > > > > local root servers.  If you want an A root delegation then we
> > > > have to see
> > > > > ccTLD's and ICANN come to terms as a first precondition.
> > > > >
> > > > > If we split into separate roots then we split the internet, increase
> > > > > security risks and lose universality.
> > > >
> > > >   Actually the opposite is true Christian.  With S-Roots (Shared Root)
> > > > you have increased security and no single point of failure as well.
> > > > Same is true with Shared Registries for DNS.  Some 800+ name
> > > > servers are already running one of another version of "Shared Roots"
> > > > with modified Bind now from my last count..  We also already have
> > > > Inclusive and Competitive Registries such as ORSC which has been
> > > > around for several years now and can be linked in on Shared
> > > > Roots at any time...
> > > >
> > > > > So a bad idea for europe, africa asia
> > > > > and americas including the Pentagon.
> > > > >
> > > > > Christian de Larrinaga
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: Vittorio Bertola [mailto:vb@vitaminic.net]
> > > > > > Sent: Monday, April 22, 2002 10:31
> > > > > > To: Jefsey Morfin
> > > > > > Cc: icann-europe@lists.fitug.de; ecdiscuss@ec-pop.org
> > > > > > Subject: [ecdiscuss] Re: [icann-europe] European Root
> > Server System
> > > > > >
> > > > > >
> > > > > > On Sun, 21 Apr 2002 19:22:33 +0200, Jefsey Morfin
> > <jefsey@wanadoo.fr>
> > > > > > wrote:
> > > > > >
> > > > > > >I am interested in the cond and pros about a European parallel
> > > > > > root sever
> > > > > > >system.
> > > > > > >
> > > > > > >IMHO the current US cybersecurity study of Richard Clarke
> > > > will show the
> > > > > > >need that the Pentagon has claimed a few times already of an
> > > > all US root
> > > > > > >server system. I think we should consider our own root server
> > > > > > system as a
> > > > > > >contingency plan.
> > > > > >
> > > > > > I absolutely don't like the idea of breaking the Internet
> > in parts,
> > > > > > but given that the Internet is now a vital infrastructure for
> > > > > > economical development and for national security, it doesn't seem
> > > > > > likely that the US government releases any control over it in the
> > > > > > short term, even if to a true international organisation,
> > and I don't
> > > > > > think that the EU should continue accepting the US ruling over it,
> > > > > > especially in the present situation where US delegates a
> > part of it to
> > > > > > ICANN which in turns not only fails, but actively refuses to grant
> > > > > > adequate representation to the public in general, and to
> > establish any
> > > > > > real means of participation for non-English-speaking communities.
> > > > > >
> > > > > > So I think that the EU should set up both a parallel root
> > system and a
> > > > > > parallel organisation to ICANN (at least, to the current
> > US-controlled
> > > > > > ICANN), and then such organisation and US-ICANN could agree to
> > > > > > maintain the two systems synchronised, or even to
> > establish a small
> > > > > > overlying council to decide worldwide policy when
> > necessary (based on
> > > > > > the principle that decisions should be taken locally as much as
> > > > > > possible). So the EU root, in case of need, could be used in the
> > > > > > interest of European citizens and economies - not, when
> > they collide,
> > > > > > in the interest of the US ones.
> > > > > >
> > > > > > My opinion, of course, might change if ICANN became a
> > truely open and
> > > > > > international organization. But anyway, I feel the need for a
> > > > > > "detachable" European set of servers in case Europe ever needed to
> > > > > > claim its independence.
> > > > > > --
> > > > > > .oOo.oOo.oOo.oOo vb.
> > > > > > Vittorio Bertola     <vb@vitaminic.net>    Ph. +39 011 23381220
> > > > > > Vitaminic [The Music Evolution] - Vice President for Technology
> > > > > >
> > > > > > DISCLAIMER, PLEASE NOTE: This communication is intended only for
> > > > > > use by the
> > > > > > addressee. It may contain confidential or privileged information.
> > > > > > Transmission, distribution and/or copy cannot be permitted.
> > > > Please notify
> > > > > > immediately the sender by replying if you are not the
> > > > intended recipient.
> > > > > >
> > > >
> > > > Regards,
> > > >
> > > > --
> > > > Jeffrey A. Williams
> > > > Spokesman for INEGroup - (Over 121k members/stakeholdes strong!)
> > > > CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng.
> > > > Information Network Eng. Group. INEG. INC.
> > > > E-Mail jwkckid1@ix.netcom.com
> > > > Contact Number:  972-244-3801 or 214-244-4827
> > > > Address: 5 East Kirkwood Blvd. Grapevine Texas 75208
> > > >
> > > >
> > > >
> > > >
> >
> > Regards,
> > --
> > Jeffrey A. Williams
> > Spokesman for INEGroup - (Over 121k members/stakeholdes strong!)
> > CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng.
> > Information Network Eng. Group. INEG. INC.
> > E-Mail jwkckid1@ix.netcom.com
> > Contact Number:  972-244-3801 or 214-244-4827
> > Address: 5 East Kirkwood Blvd. Grapevine Texas 75208
> >
> >
> >

Regards,
--
Jeffrey A. Williams
Spokesman for INEGroup - (Over 121k members/stakeholdes strong!)
CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng.
Information Network Eng. Group. INEG. INC.
E-Mail jwkckid1@ix.netcom.com
Contact Number:  972-244-3801 or 214-244-4827
Address: 5 East Kirkwood Blvd. Grapevine Texas 75208



-- 
To unsubscribe, e-mail: icann-europe-unsubscribe@lists.fitug.de
For additional commands, e-mail: icann-europe-help@lists.fitug.de