[arin-announce] Updates to ARIN’s Registration RESTful Service (Reg-RWS)

[ARIN]

On 2 December 2019, there will be two changes made to the RESTful API
that ARIN uses for registration information. These changes may impact
the way you interface with ARIN Online for sending reassignment
information and receiving reports through ARIN’s Registration RESTful
Service (Reg-RWS). The changes are:

     1. The base URL https://www.arin.net/REST will be no longer be
available for Reg-RWS. You must change your base URL to
https://reg.arin.net to interface with ARIN’s Reg-RWS service. The
reg.arin.net service has been available for over seven years.
     2. ARIN will no longer be supporting TLS 1.0 for Reg-RWS’s
transport layer. There are well-known security issues with this
protocol. We will continue to support TLS 1.1 and 1.2. Please make sure
your client implementation will support TLS 1.1 or 1.2. Read
https://datatracker.ietf.org/doc/draft-ietf-tls-oldversions-deprecate/
for further details.

We are providing you advance notice of these changes, as you may need to
make configuration or code changes on your clients that interface with
the Reg-RWS service. Both TLS 1.1 and TLS 1.2 are available now on
reg.arin.net and we encourage you to make these changes so you will have
no operational impact when we disable https://www.arin.net/REST and the
vulnerable transport protocols.

So that you can plan your upgrades accordingly, we would also like to
inform you of future planned events for this service. We will be adding
TLS 1.3 support to Reg-RWS in the near future. We also anticipate
announcing end-of-service support for TLS 1.1, with another
corresponding 120 day warning notice.

Regards,

Mark Kosters
Chief Technology Officer
American Registry for Internet Numbers (ARIN)