1. ed.lewis@neustar.bizPerth AU, March 2, 20061 DNSSEC, APNIC, & how EPP might play a Role Ed Lewis DNS SIG APNIC 21

2. ed.lewis@neustar.bizPerth AU, March 2, 20062 Agenda Reverse Map Interfaces EPP and Number Registries DNSSEC and Number Registries EPP extensions for DNSSEC Passing DNSSEC Data Quick Demo

3. ed.lewis@neustar.bizPerth AU, March 2, 20063 Reverse Map environment DNS Operator RIR IP space holder Internet User NIR IANA LIR (sub)LIR OR Where DNSSEC data might flow (administratively)

4. ed.lewis@neustar.bizPerth AU, March 2, 20064 EPP and Number Registries EPP (RFC 3730+) written for ICANN- style registrars and registries –"Business to business" Potentially helpful to RIRs –Marginal benefit, not worth the change DNSSEC interface might suggest a look –Maybe, maybe justifies use by the RIRs

5. ed.lewis@neustar.bizPerth AU, March 2, 20065 DNSSEC Adds secure records to DNS –RFC 4033-4035 –Parent will have to publish DS records RIPE NCC has signed their zones –Open for RIPE IP range holders DNSSEC DS RRset is posted to RIPE –Via a "ds-rdata" attribute

6. ed.lewis@neustar.bizPerth AU, March 2, 20066 EPP-DNSSEC RFC 4310 Adds a means to transfer DNSSEC administrative data via the provisioning interface for domains –DS or DNSKEY –Request max signature time An extension to EPP's base definition

7. ed.lewis@neustar.bizPerth AU, March 2, 20067 Passing DNSSEC Data Increased frequency –Not a "one time set up", a recurring relationship Increased bulk –DS records have quite a few "random" characters, hard to type correctly

8. ed.lewis@neustar.bizPerth AU, March 2, 20068 Quick Demo This was used to update the RFC prior to publication "Shows" more than "does", but shows it works

9. ed.lewis@neustar.bizPerth AU, March 2, 20069 Window Layout Registrant DNS "work directory" EPP Client EPP Server DNS Update Client TLD Server Running EPP Log File Dynamic Update Cut&Paste