On 19/03/2012, at 8:53 AM, Lloyd Parkes wrote:
Would that work with DNSSEC?
Not with the existing keys. Any breakaway root operators would need to generate new keys and sysadmins around the world would to enable them as trust anchors, or a breakaway root would be unsigned. Despite these difficulties I agree with Keith - taking the TLD of a democratic, free country out of the root would split the root irretrievably. The threat is so clear that even if a US court ordered it the US Government would not comply (and they still authorise all root changes so it doesn't matter what IANA does). cheers Jay
Cheers
Lloyd Parkes | Systems Consultant, Open Systems | Inland Revenue T. +64 4 890 2437 | F. +64 4 890 4704
________________________________________ From: nznog-bounces(a)list.waikato.ac.nz [nznog-bounces(a)list.waikato.ac.nz] on behalf of Keith Davidson [keith(a)keith.co.nz] Sent: Sunday, 18 March 2012 11:40 a.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] NTIA vs ICANN
I would think that if .nz was removed from the IANA database without InternetNZ / NZ Government consent, for whatever reason, by the US Government, the consequences would be extreme against the US Government. I think a number of root server operators would take immediate steps to break their current arrangements to publish the authoritative IANA database and would add manual entries to ensure the continued resolution of the DNS. I would think a great number of ccTLDs would immediately resile from the US Government, and launch a process to remove the ccTLD database from IANA and US Government control, establishing alternate and independent root server operations. I think the US Government, or at least the NTIA fully understand the likely consequences. But nonetheless, given the foibles of US courtroom decisions, agree it is not beyond the realms of possibility that a situation could arise where the US Government might be *required* by a US Court to remove IANA database entries.
So I think its a case of "all your base are not belong to us" :-)
This topic might have some value being aired at the Nethui or foo?
Cheers
Keith And in a lame attempt to keep the topic acceptable on NZNOG: Get me a beer? Get it yourself! Sudo get me a beer? OK.
On 16/03/2012 1:03 p.m., Andy Linton wrote:
On 15/03/12 16:43 , Keith Davidson wrote:
I suppose the strength that can continue for ccLTDs like .nz, facing competition from the potential large number of new gTLDs, is that we remain completely at arms length from US law enforcement and politics,
There's one "minor" corner case where a US court could direct ICANN, IANA, Verisign etc to remove the .nz delegation from the root zone.
Oh, and large chunks of our routing to the rest of the world goes via the US so perhaps not quite completely.
And I guess if the Megaupload story tells us anything our authorities will do what they're asked.
_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
----- No virus found in this message. Checked by AVG - www.avg.com Version: 10.0.1424 / Virus Database: 2113/4872 - Release Date: 03/15/12
_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog This email and any attachment may contain confidential information. If you have received this email or any attachment in error, please delete the email / attachment, and notify the sender. Please do not copy, disclose or use the email, any attachment, or any information contained in them. Consider the environment before deciding to print: avoid printing if you can, or consider printing double-sided. Visit us online at ird.govt.nz _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
-- Jay Daley Chief Executive .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 931 6977 mobile: +64 21 678840