I'm satisfied with NZRS DNSSEC procedures
Hi All, Following a meeting with Dave and Sebastian from NZRS today (an offer they extended to any party wishing to speak to them more in depth). I am happy to report that I am satisfied with the way that NZRS is implementing the DNSSEC signing of the .nz zone. I have been assured that any lingering areas of concern I had before the meeting, will be addressed either before deployment, or are on the NZRS roadmap. I'd like to thank all the NZRS staff for their hard work and patience to make this a much more robust process and I wish them all the best with the deployment. I would also encourage them to maintain this level of community involvement through the signing process and into production deployment. Regards, Dean
I'd like to thank Dean (and a number of others) for raising the concerns they had about the .nz DNSSEC process and implementation. I'd also like to thank the NZRS staff for the positive way in which this has been handled. The support of the NZNOG technical community for the DNSSEC process is important and all of this makes our process more robust and bodes well for the way DNSSEC will be implemented over the next few months.
I'd like to thank Dean for this very positive message. His observations and those of everyone else were all very useful and important for us to hear and we now have a much more transparent and detailed policy as a result. It is also very positive that we managed to work past the rocky start to this discussion to a position of mutual trust, which I'm sure will carry into further discussions on .nz operations. NZRS has largely kept to the shadows since its inception, but I think we all realise now that for a function as important as ours, transparency and open discussion about our policies are a necessity to ensure the ongoing trust of the technical community, and so this process we've begun of opening up and asking for feedback will continue. If anyone has any further suggestions on making this happen then we would be grateful to hear them at any time. With the DNSSEC policy agreed, the next stage is for us to publish our DNSSEC implementation timetable, which are just waiting for DNCL agreement to do, as we are approaching the final stages and we would like to give you as much notice to prepare as possible. cheers Jay On 15/09/2011, at 5:37 PM, Dean Pemberton wrote:
Hi All,
Following a meeting with Dave and Sebastian from NZRS today (an offer they extended to any party wishing to speak to them more in depth). I am happy to report that I am satisfied with the way that NZRS is implementing the DNSSEC signing of the .nz zone.
I have been assured that any lingering areas of concern I had before the meeting, will be addressed either before deployment, or are on the NZRS roadmap. I'd like to thank all the NZRS staff for their hard work and patience to make this a much more robust process and I wish them all the best with the deployment.
I would also encourage them to maintain this level of community involvement through the signing process and into production deployment.
Regards, Dean _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
-- Jay Daley Chief Executive .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 931 6977 mobile: +64 21 678840
participants (3)
-
Andy Linton -
Dean Pemberton -
Jay Daley