Fwd: ICANN News Alert -- RSTEP Report on PIR's Request to Implement DNSSEC in .ORG

[Steve Crocker]

Public Interest Registry, the operator of the .org domain, submitted  
a formal request to ICANN for permission to initiate DNSSEC  
operation.  In keeping with ICANN's rules for considering substantive  
changes to a registry's operation which might affect security and/or  
stability, ICANN convened an RSTEP (Registry Services Technical  
Evaluation Panel) to evaluate PIR's proposed change.  Below is  
ICANN's announcement of the report from that process which was  
released this evening.  The main conclusion is:

> Our technical evaluation of this proposed registry service with  
> respect to the likelihood
> and materiality of effects on security and stability concludes that  
> it does create a
> reasonable risk of a meaningful adverse effect on security and  
> stability, which can be
> effectively mitigated by policies, decisions, and actions to which  
> PIR either has
> expressly committed in its proposal or could reasonably be required  
> to commit.


The report also has a lot of additional detail worth reading.  The  
overall assessment is positive, and I fully expect the ICANN Board  
will approve PIR's request.  At the same time, the panel pointed a  
number of detailed issues to be dealt with.  In my view, none of  
these pose any serious problems, and with a bit of experience I would  
expect some, if not all, of the concerns listed in this report will  
be laid to rest.

Steve


Begin forwarded message:

> Resent-From: <steve at stevecrocker.com>
> From: ICANN News Alert <communications at icann.org>
> Date: June 5, 2008 7:54:59 PM EDT
> To: steve at stevecrocker.com
> Subject: ICANN News Alert -- RSTEP Report on PIR's Request to  
> Implement DNSSEC in .ORG
>
>
> News Alert
>
> http://icann.org/en/announcements/announcement-2-05jun08-en.htm
>
> RSTEP Report on PIR's Request to Implement DNSSEC in .ORG
> 5 June 2008
> On 21 April 2008, ICANN referred Public Interest Registry (PIR)'s  
> proposed implementation [PDF, 205K] of DNS Security Extensions  
> (DNSSEC) in .ORG to the Registry Services Technical Evaluation  
> Panel (RSTEP). In accordance with the Registry Services Evaluation  
> Policy (RSEP), the RSTEP had 45 calendar days to review the  
> proposal and prepare a written report on whether the proposed  
> Registry Service creates a reasonable risk of a meaningful adverse  
> effect on Security or Stability. The RSTEP Review Team completed  
> its report that can be found at http://icann.org/registries/rsep/ 
> rstep-report-pir-dnssec-04jun08.pdf [PDF, 481K]. Very briefly, the  
> technical evaluation found that the proposed implementation of  
> DNSSEC, "does create a reasonable risk of a meaningful adverse  
> effect on security and stability, which can be effectively  
> mitigated by policies, decisions, and actions to which PIR either  
> has expressly committed in its proposal or could reasonably be  
> required to commit."
>
> The Review Team consisted of the following members:
>
> Patrik Fältström (Cisco; USA)
> Paul Hoffman (VPN Consortium, USA) (Chair)
> Mark Kosters (ARIN, USA)
> Frederico A C Neves (NIC.br, Brasil)
> Andrew Sullivan (Command Prompt, Canada)
>
> Under the terms of the RSEP, following receipt of the RSTEP report,  
> the ICANN Board will determine whether the proposed Registry  
> Service creates a reasonable risk of a meaningful adverse effect on  
> Stability or Security.
>
> ICANN invites public comments on the RSTEP Report through 20 June  
> 2008 23:59 UTC. Comments can be submitted to pir-dnssec- 
> proposal at icann.org, and viewed at http://forum.icann.org/lists/pir- 
> dnssec-proposal/. All documents related to the PIR proposal are  
> available at http://www.icann.org/registries/rsep/#2008004.
>
> The Board is expected to consider the RSTEP Report and PIR's  
> proposal following synthesis and reporting of the public comment.
>
> Sign up for ICANN's Monthly Magazine
>
>
>
> This message was sent from ICANN News Alert to  
> steve at stevecrocker.com. It was sent from: ICANN, 4676 Admiralty  
> Way, Suite 330 , Marina del Rey, CA 90292-6601. You can modify/ 
> update your subscription via the link below.	
>
>   Manage your subscription	   											 		
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://dnssec-deployment.org/pipermail/dnssec-deployment/attachments/20080605/f0fd082d/attachment.html