February 1999 - NZNOG - lists.nznog.org

PGP Keysigning Party - APRICOT 99, Singapore, March 1-5 1999
by Barry Raveendran Greene 16 Feb '99

16 Feb '99

APRICOT 99, Singapore, March 1-5 1999 PGP Keysigning Party As at most IETF meeting and other regular networking events with sufficient participants, we will be holding a PGP keysigning party during this March's APRICOT/ICANN/APNG/APNIC Meetings & Singapore Linux Conference in Singapore. Quick Facts: ============ Key Submission: Deadline: All keys must be received in the submission email box by Wednesday, 3 March 1999, 18:00 (Singapore Time !) Submission pgp(a)apricot.net email address: Subject: APRICOT PGP KEY Format: Please send your key as normal ASCII text. The keys should NOT be sent as attachments or in any proprietary format (like eg MS Word etc). PGP Formats PGP 2.6 (RSA) and PGP5 (RSA and D/H) Supported Note: Keys sent to any other address or sent with a different subject may not be included in the official Apricot 99 PGP keyring! Event details: Date: Thursday, 4 March 1999 Time: 18:00 - 19:30 Venue: Suntec City Convention City Room MR203 (Level 2) Status: BOF (Birds of a Feather ...) (ie *all* are welcome, as long as your key has been received on time. No APRICOT/SLC etc registration required !) Please check the APRICOT Notice board for any changes in Room and Time ! Instructions for Participants: ============================== 1. Who should attend 1. All people who have a PGP key The PGP Keysigning Party will enable you to obtain additional signatures (among others by noted net- personalities) for your PGP key. 2. All people who have just started to use PGP If you just started using PGP, It is unlikely that your key has been signed by (m)any other PGP users so far. To ensure that your key is trusted by the majority of the PGP users all over the world, you will be interested to have well- known net-personalities (and other people) sign your key. 3. Those who do not have a PGP key yet You will need to: 1. read up on PGP itself 2. create your own PGP key to attend the keysigning party 4. Organizations Many organizations use PGP to sign official announcements etc. Usually these organizations publish their PGP key on the web. As additional security, you may want your key to be signed by other trusted 2. Preparation - extract your public key using one of the following commands (depending on your PGP version): -UNIX PGP 2.6* $ pgp -kxa <your PGP userid> -UNIX PGP 5.* $ pgpk -xa <your PGP userid> -Win95 or other GUI Use the export function to export your implementation key to a text file For more details on the PGP commands refer to the PGP manual - send in your PGP public key. (the PUBLIC KEY!!! Never give out your PRIVATE key to anyone!!) to the submission email address listed above. Please do NOT send the key as an attachment or in any other format but ASCII ARMORED TEXT! You could cut and paste the ascii armored PGP key into the email body if necessary! - write down (print out) your own public key's fingerprint and the Key ID. Under UNIX, you can obtain the key ID and fingerprint using these commands: -UNIX PGP 2.6* $pgp -kvc <your PGP userid> -UNIX PGP 5.* $ pgpk -ll <your PGP userid> -Win95 or other GUI Check the Key Properties (in implementation PGPkeys) Here is an example of a PGP key ID and fingerprint extracted under UNIX (PGP 5.0i): Note: This also lists the signatures on this key, but we need only the first few lines (marked with **): $ pgpk -ll mathias Type Bits KeyID Created Expires Algorithm Use ** sec+ 768 0x25E082BD 1995-11-15 ---------- RSA Sign & Encrypt ** f16 Fingerprint16 = 1A 8B FC D4 93 F1 9A FC BD 98 A3 1A 0E 73 01 65 uid Mathias Koerber <mathias(a)koerber.org> SIG 0x25E082BD 1996-08-22 Mathias Koerber <mathias(a)koerber.org> uid Mathias Koerber <mathias(a)staff.singnet.com.sg> sig 0x101E3A11 1998-02-23 Alfonso B. Carandang <abc(a)epic.net> SIG 0x25E082BD 1996-06-09 Mathias Koerber <mathias(a)koerber.org> uid mathias(a)singapura.singnet.com.sg SIG 0x25E082BD 1995-11-17 Mathias Koerber <mathias(a)koerber.org> uid Mathias Koerber <Mathias_Koerber(a)pobox.org.sg> SIG 0x25E082BD 1995-11-16 Mathias Koerber <mathias(a)koerber.org> uid Mathias Koerber <mathias(a)singnet.com.sg> sig 0x3022C951 1995-12-18 William Allen Simpson <Bill.Simpson(a)um.cc.umich.edu> sig? 0x0DBF906D 1996-03-09 (Unknown signator, can't be checked) sig? 0x579532CD 1995-12-08 (Unknown signator, can't be checked) sig? 0x7B7AE5E1 1995-12-18 (Unknown signator, can't be checked) sig 0x76875905 1995-12-10 Angelos D. Keromytis <kermit(a)forthnet.gr> sig 0x466B4289 1995-12-07 Theodore Ts'o [SIGNATURE] <tytso(a)mit.edu> SIG 0x25E082BD 1995-11-15 Mathias Koerber <mathias(a)koerber.org> uid Mathias Koerber <mathias(a)singnet.com.sg> <Mathias_Koerber(a)pobox.org.sg> SIG 0x25E082BD 1995-11-15 Mathias Koerber <mathias(a)koerber.org> 3. At APRICOT, before the PGP keysigning Party - periodically check the noticeboard, where the list of keys submitted for the PGP keysigning party will be posted. Your key must be submitted by the deadline to be called during the keysigning party and included in the official APRICOT PGP keyring. If you submitted your key, and it does not appear on the list, please submit it again before the deadline! 4. At the PGP Keysigning Party itself - Bring along proper PHOTO identification For other participants to sign your PGP key (which is the whole aim of this event), they must be able to verify that the key belongs to you and that you really are who you claim to be. - if you submitted a PGP key for your organization, please bring along identification which proves that you are indeed representing that organization · letter by the president/management etc on their stationery · namecard · company pass etc - obtain the list of submitted keys (this will be provided as a printout at the beginning of the party). - check that YOUR OWN public key is listed on the printout, and check its PGP KEY FINGERPRINT. Check it carefully. The fingerprint must match in *every* character Procedure ========= - During the party, we will one by one read out aloud each PGP key submitted including the KeyID, the attached userIDs (names) and the Key Fingerprint. During this the owner of the key will stand up to be recognized by the crowd. (We may need each key-owner to read their own Key fingerprint etc, unless we manage to rustle up a suitable Voice program to automatically read the keys) - During this, each participant should 1. check that the userid, name, keyid and fingerprint match what is printed on your printout 2. ensure that the person standing up acknowledges the key as his own 3. note which keys checked out ok and which ones haven't - After all keys have been read, you are encouraged to 1. verify the owners' identities by checking their supporting documents (Photo ID) 2. especially carefully verify the credentials for those who want an organization's key signed. 5. After the PGP Keysigning Party - obtain the official APRICOT 99 keyring from http://www.koerber.org/apricot99/ This will be available sometime after the keysigning party. A more detailed announement will be posted on the APRICOT Notice Board. There will be 2 keyfiles, one with only PGP2.6 keys, the other containg all (PGP2.6 and PGP5) keys - decide whose keys you would want to sign (using your notes made during the keysigning party) You should only sign keys if you have *very carefully* verified the key's integrity and the owner's supporting documents (passport etc). If there is any doubt as to a person's identity or ownership of a key, do NOT sign that person's key !! - sign these people's keys with your own PGP PRIVATE KEY, using your PGP software - export/save the signed keys into ASCII files (see the PGP manual) - either send the signed public keys to the keys owner (recommended) or to one of the public PGP keyservers. It is recommended that you send the key to the owner, so that they can decide themselves which signatures to send to the keyservers. - If you had presented your own key, you may want to check the public pgp keyservers periodically to see whether other participants have sent in new signatures for your own key. If so, you may want to obtain you own public key from the server and add it (actually only the additional signatures) to your own keyring. If another participant has sent you your key with a new signature, you will want to add the new signature to your own keyring, and then send the key to the public PGP keyservers. ========== Background ========== What is PGP? PGP (Pretty Good Privacy) is a standard (and a program implementing that standard) providing strong authentication and encryption for email (and other networking applications such as internet phone) using a public key system. Why is PGP important? From the PGP FAQ (http://www.at.pgp.net/pgpnet/pgp-faq/) You should encrypt your e-mail for the same reason that you don't write all of your correspondence on the back of a post card. E-mail is actually far less secure than the postal system. With the post office, you at least put your letter inside an envelope to hide it from casual snooping. Take a look at the header area of any e-mail message that you receive and you will see that it has passed through a number of nodes on its way to you. Every one of these nodes presents the opportunity for snooping. Encryption in no way should imply illegal activity. It is simply intended to keep personal thoughts personal. Xenon <an48138(a)anon.penet.fi> puts it like this: Crime? If you are not a politician, research scientist, investor, CEO, lawyer, celebrity, libertarian in a repressive society, investor, or person having too much fun, and you do not send e-mail about your private sex life, financial/political/legal/scientific plans, or gossip then maybe you don't need PGP, but at least realize that privacy has nothing to do with crime and is in fact what keeps the world from falling apart. Besides, PGP is FUN. You never had a secret decoder ring? Boo! -Xenon (Copyright 1993, Xenon) What is keysigning, and why is it important? Again, see the FAQ: http://www.at.pgp.net/pgpnet/pgp-faq/faq-06.html What is a PGP Keysigning party? A PGP keysigning party is not a party in the sense of celebration. It is unlikely that alcohol will flow or hors d'oevres be passed out. As PGP uses a public key system, it usually is easy to obtain some person's public PGP key (which is required to securely converse with that person or to verify that person's authorship or identity). The usual method for this is to either ask the person directly for their PGP key. Another method is to request it from a public PGP keyserver, which is like a worldwide replicated directory of PGP public keys. More info? You can find more information on PGP at these webpages: PGP Inc.: http://www.pgp.com PGP.net: http://www.pgp.net International PGP Homepage: http://www.ifi.uio.no/pgp/ There is a PGP discussion newsgroup named comp.security.pgp and its FAQ: http://www.at.pgp.net/pgpnet/pgp-faq/ There is a book on PGP published by O'Reilly & Associates: Simson Garfinkel: PGP: Pretty Good Privacy 1st Edition December 1994 1-56592-098-8, Order Number: 0988 430 pages, $29.95 see: http://www.oreilly.com/catalog/pgp/noframes.html ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~ APRICOT (Asia & Pacific Rim Internet Conference on Operational Technologies) Singapore March 1 - 5, 1999 -- The Annual ISP Operations and Business Summit in Asia and Pacific -- http://www.apricot.net ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: NZNOG BOG at Uniforum '99
by Donald Neal 13 Feb '99

13 Feb '99

Joe, I'm due to be there. Must write paper soon, too. - Donald Neal --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZNOG BOG at Uniforum '99
by Joe Abley 13 Feb '99

13 Feb '99

Hi all, Last year a few of us got together at Uniforum to drink beer^H^H^H^H^H^H^H discuss serious issues, resulting in (amongst other things) this list being a bit more widely used. It was also kind of nice to put faces to e-mail addresses. Just a quick straw-poll - who's thinking about going to Uniforum '99 in Rotorua? Enough to organise a BOF at the bar? Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Re: NZNOG BOG at Uniforum '99
by Mark Davies 13 Feb '99

13 Feb '99

From: Joe Abley <jabley(a)patho.gen.nz> Date: Sun, 14 Feb 1999 13:35:25 +1300 > Oh good lord, damn my typing. That's "BOF", not "BOG". And I thought you were implying something :-) Well I am thinking of going to some of it, unfortunately it clashes with another very important event. cheers mark --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Surplus Equipment
by Robert Gray 07 Feb '99

07 Feb '99

I know this is not the place to discuss selling/buying surplus network equipment, but (in common with others?) we have collected quite a bit gear which is somewhat specialist in nature and surplus to requirements. In other words Trade and Exchange is not an appropriate outlet. Anyone found a good place to trade such gear? Robert Gray Clearview Communications, Auckland New Zealand bobg(a)clearview.co.nz http://www.clearview.co.nz/ Phone DDI +64 9 529 5704, Fax +64 9 529 5702, Mob +64 25 971 860 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Christchurch Recycler details herewith
by Les Chapman 07 Feb '99

07 Feb '99

G'day all Electronic details for Christchurch PC Recycling company are Molten Metal Christchurch bj(a)molten.org.nz (Brett Hayward) This message is sent via Outlook 2000, if any issues please contact me TTFN Les Chapman mostly a gopher at Swichtec/odtaa/ThincNZ asker of at least half-remarkable questions proudly resident in Canterbury on the Brains Plain elsie(a)stmartins.school.nz bosandals(a)stmartins.school. trouble(a)stmartins.school.nz bufonidae(a)stmartins.school.nz les(a)stmartins.school.nz (pick 'n' mix emailing <G) Phone: +64-3-343-3314(friendly answerperson) Fax: +64-3-343-5100 Dungeon: +64-3-332-9143(moi occasionally) Voicemail: +64-3-332-4998(always) http://www.swichtec.co.nz http://www.intergy.co.nz http://www.electroflash.org.nz http://www.stmartins.school.nz "aibohphobia - fear of palindromes?" "Be Alert - for we need more of them!" "wisdom - is knowing a deja-vu when you stumble across one" "if at first you don't succeed - trier drier grain" "The mind is like a parachute - its useless unless its open" "if something goes without saying - let it! "Schools need curriculum, not technology!" "A woman who tries to emulate men lacks vision" "I wish this BETA guy would stop testing our software!" --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

APNIC "Policies for Address Space Management in the Asia Pacific Region"
by Joe Abley 07 Feb '99

07 Feb '99

http://www.apnic.net/policydraft.html --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Surplus Equipment
by Frank March 06 Feb '99

06 Feb '99

Schools may be interested in good quality equipment which is replaced because of upgrading (ie is still perfectly serviceable or readily repaired). A national consortium of computer recyclers has been set up to channel good quality equipment at minimal cost into schools and not-for-profit organisations (schools are the main emphasis). I am copying this to their mailing list. Briefly AFAIK at present there are just three recyclers: Bob Lye (The Ark) in Auckland; Richard Darton (PCRC) on Wellington and another group in Christchurch (apologies to the folk down there, I dont know who you are). These people are attempting to live from these activities but margins are low so they really appreciate DONATIONS of gear ;) Computer (and other IT equipment) recycling is endorsed as part of the series of initiatives from the Ministry of Education for IT in schools. Another very good contact group is NetDay99.. contacts and information at the web site http://www.netday.net.nz/ NetDay is also backed by the Ministry of Education and many other fine institutions. Netday provides very basic networks for schools (a basic 8 or 16 port hub and Cat 5 cabling) but routers, servers etc etc are badly needed. Frank March Specialist Advisor IT Policy Group, Ministry of Commerce, PO Box 1473, Wellington, New Zealand Telephone: +64 4 474 2908; Fax: +64 4 471 2658 (Please note new Fax number) > -----Original Message----- > From: Robert Gray [SMTP:bobg(a)clearview.co.nz] > Sent: Monday, February 08, 1999 8:30 AM > To: nznog(a)list.waikato.ac.nz > Subject: Surplus Equipment > > I know this is not the place to discuss selling/buying surplus network > equipment, but (in common with others?) we have collected quite a bit gear > which is somewhat specialist in nature and surplus to requirements. In > other > words Trade and Exchange is not an appropriate outlet. > > Anyone found a good place to trade such gear? > > Robert Gray > Clearview Communications, Auckland New Zealand > bobg(a)clearview.co.nz http://www.clearview.co.nz/ > Phone DDI +64 9 529 5704, Fax +64 9 529 5702, Mob +64 25 971 860 > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: BGP at NZIX. Mmm.
by Warwick GLENDENNING 06 Feb '99

06 Feb '99

>WebFarm blames Ihug for its network becoming inaccessible, because of action Ihug took >following a network attack. But Ihug director Nick Wood doesn't believe the 16-hour outage was >its fault. He says Ihug was being attacked by someone he claims was on the WebFarm network. "We >blocked their network on our router and Waikato's router, for some reason, at NZIX learned the >route." IHUG doesn't directly connect to NZIX. They are behind Telecom's router. -----Original Message----- From: Joe Abley [mailto:jabley(a)patho.gen.nz] Sent: Monday, 8 February 1999 01:15 To: nznog(a)list.waikato.ac.nz Subject: BGP at NZIX. Mmm. http://www.idg.co.nz/nzweb/ca6a.html Looks like another good reason to use a routing protocol that can be filtered at NZIX :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

The New Zealand Network Operators' Group
by Donald Neal 06 Feb '99

06 Feb '99

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has neither a king, a president nor a formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. (At last count the list had 66 subscribers.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document,. a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to arrange meetings over beer. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0