[arin-ppml] ARIN discontinuing DNSSEC capability to legacy holders

[hostmaster at uneedus.com]

I agree that we clearly need universal DNSSEC, and ARIN should not take 
actions that inhibit universal DNSSEC.

I understand that ARIN has taken actions to try to get the remaining 
legacy holders to move to an RSA.  While this might be seen as a "carrot" 
to try to move these holders to an RSA, it is actually more like a "stick" 
to the rest of the community.

Please do not do anything to stop universal DNSSEC in any form.

Albert Erdmann
Network Administrator
Paradise On Line Inc.

On Thu, 4 Oct 2018, Paul Andersen wrote:

> Bill,
>
> I am personally fully committed to universal DNSSEC, and I believe  that this practice deleteriously affects all ARIN members, not just legacy ones. I hope that discussion on this list will indicate a clear community consensus, so that the board can ensure that staff act upon that input.
>
> Cheers,
>
> Paul
>
>
>> On Oct 4, 2018, at 2:00 PM, Bill Woodcock <woody at pch.net> wrote:
>>
>>
>>
>>> On Oct 4, 2018, at 9:29 AM, Michael Sinatra <michael+ppml at burnttofu.net> wrote:
>>> I have received word of an apparent change in ARIN operational policy...
>>> ...no longer accepting DNSSEC DS records for reverse DNS for those resources that are not covered by RSA or LRSA.  This is a change from current operational practice, and it effectively disables the *community's* ability to validate reverse DNS for these holders.
>>
>> This is an unconscionable roll-back of a critical security feature of the Internet.  This cannot be allowed to move forward.
>>
>>                                -Bill
>>
>> _______________________________________________
>> ARIN-PPML
>> You are receiving this message because you are subscribed to
>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
>> Unsubscribe or manage your mailing list subscription at:
>> https://lists.arin.net/mailman/listinfo/arin-ppml
>> Please contact info at arin.net if you experience any issues.
>
> _______________________________________________
> ARIN-PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> https://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.
>