From info at arin.net Thu Oct 1 16:35:30 2015 From: info at arin.net (ARIN) Date: Thu, 1 Oct 2015 16:35:30 -0400 Subject: [ARIN-Suggestions] Update on ACSP 2015.15 Message-ID: <560D9912.2030306@arin.net> The following response was provided to the author of ACSP 2015.15: Improvements to SSL Security for whois.arin.net Thank you for your suggestion, numbered 2015.15 upon confirmed receipt. Upon investigation, we discovered changing the Diffie-Hellman (DH) key parameter is a configuration change that is not currently supported by the vendor-supplied solution we use to front our directory service applications. We are investigating our options for this improvement with our vendor. We will make the change once the vendor delivers a solution that is tested and proven to work. As part of our third-party security audits, we require analysis and reporting of our SSL-based services. Thank you for bringing this matter to our attention. This suggestion will remain open until a solution is in place. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) -------------- next part -------------- An HTML attachment was scrubbed... URL: From info at arin.net Fri Oct 2 13:39:03 2015 From: info at arin.net (ARIN) Date: Fri, 2 Oct 2015 13:39:03 -0400 Subject: [ARIN-Suggestions] Closing ACSP 2013.8 and 2012.2 Message-ID: <560EC137.7030905@arin.net> The following suggestions were completed as part of ARIN's software deployment on 12 September 2015. Suggestion 2013.8: Deploy Two-Factor Authentication I propose that ARIN deploy two factor authentication across as many systems as practical. I would suggest giving non-staff multiple options including Smartphone support, hardware tokens, and possibly SMS backup. The system should be a "one to many" in cases with individuals having multiple ORG's. Suggestion 2012.2: Web-Based Whois Results Improvement On the webbased whois search, display the item that you searched for at the top of the results page. If you are doing multiple look ups a day over several days, in several tabs, its easy to forget the initial element you looked up. For example, I looked up this IP: 65.198.209.59 and get http://whois.arin.net/rest/net/NET-63-116-243-0-1/pft but no where on the search results page does it tell you what you looked up. If you look away from the screen/tab you have nothing to jog your memory about what you were doing. It's a little thing I know.. but I can't be the only one! These suggestions have been closed. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) -------------- next part -------------- An HTML attachment was scrubbed... URL: