[arin-ppml] ARIN discontinuing DNSSEC capability to legacy holders

Matthew Kaufman matthew at matthew.at
Thu Oct 4 15:09:41 EDT 2018


Ever since the "legacy resource holders get the same services that they
received upon ARIN’s formation" we knew it was only a matter of time before
some new-but-now-critical service (RPKI, DNSSEC, addition of some required
new Whois field, etc.) was denied to them. The "stick" part of the "carrot
and stick" approach to getting people to sign a service agreement.

The addresses I use are not under a service agreement, and I will continue
to use them, (and fight for them to be fully usable no matter what new
features become mandatory for a registrar to support against an address
block for the operator community to route or otherwise accept that block)
without such agreement, to communicate on the Internet.

Matthew Kaufman


On Thu, Oct 4, 2018 at 11:28 AM Paul Andersen <paul at arin.net> wrote:

> Bill,
>
> I am personally fully committed to universal DNSSEC, and I believe  that
> this practice deleteriously affects all ARIN members, not just legacy ones.
> I hope that discussion on this list will indicate a clear community
> consensus, so that the board can ensure that staff act upon that input.
>
> Cheers,
>
> Paul
>
>
> > On Oct 4, 2018, at 2:00 PM, Bill Woodcock <woody at pch.net> wrote:
> >
> >
> >
> >> On Oct 4, 2018, at 9:29 AM, Michael Sinatra <michael+ppml at burnttofu.net>
> wrote:
> >> I have received word of an apparent change in ARIN operational policy...
> >> ...no longer accepting DNSSEC DS records for reverse DNS for those
> resources that are not covered by RSA or LRSA.  This is a change from
> current operational practice, and it effectively disables the *community's*
> ability to validate reverse DNS for these holders.
> >
> > This is an unconscionable roll-back of a critical security feature of
> the Internet.  This cannot be allowed to move forward.
> >
> >                                -Bill
> >
> > _______________________________________________
> > ARIN-PPML
> > You are receiving this message because you are subscribed to
> > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> > Unsubscribe or manage your mailing list subscription at:
> > https://lists.arin.net/mailman/listinfo/arin-ppml
> > Please contact info at arin.net if you experience any issues.
>
> _______________________________________________
> ARIN-PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> https://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-ppml/attachments/20181004/87d69669/attachment.htm>


More information about the ARIN-PPML mailing list