WHOIS UPDATES
description
Transcript of WHOIS UPDATES
WHOIS UPDATES
- DNSSEC Deployment
- Full support for ASPLAIN
- Abuse Contact Implementation
Three Main Updates
DNSSEC
DNSSEC
- One part of DNSSEC deployment plan- Minor change in WHOIS - ds-rdata attribute- Two methods for updating this field
- Via MyAfrinic (with verification)- [email protected] (without verification)
Domain Object template
DNSSEC
Reverse Delegation on MyAFRINIC
DNSSEC
Example of Domain object on WHOISDNSSEC
ASPLAIN
- Full Support for 4-Byte ASN- Scrap out the dot format
- <high order 16 bit value in decimal>.<low order 16 bit value in decimal>
- 4-byte AS Number of value 65546 (decimal) would be identified as "1.10”
- Both WHOIS and Myafrinic support this format
ASPLAIN
Example of previously AS5.1 in plain format
ASPLAIN
Abuse contact Policy
Abuse Contact Policy AFPUB-2010-GEN-006 Recommendations:
For abuse reports to reach the correct network contact
Create a new or uses an already existing object A unique reference by inetnum, inet6num and
aut-num Contains 2 email attributes: "e-mail:" for personal communication "abuse-mailbox:" for automatic report handling
Abuse Contact Policy - Use existing Incident Response Team Object
Abuse Contact PolicyIRT Object
- Field: abuse-mailbox Abuse Contact email addressMandatoryMultiple
- whois -i abuse-mailbox <email>
- Field: emailAbuse Contact email addressMandatoryMultiple
Abuse Contact PolicyIRT Object
Field: auth Authentication credentials
Password or PGP Key Used when adding or removing a reference to inetnum,
inet6num or aut-num objects Mandatory Multiple
whois -i auth <email>
Abuse Contact Policy
IRT Object Field: irt-nfy Notify email address Optional Multiple
whois -i irt-nfy <email>
Abuse Contact Policy
]
Abuse Contact Policy
INETNUM Object Field: mnt-irt Reference an IRT object Optional Multiple
whois -i mnt-irt <IRT ID> Similarly in INET6NUM and AUT-NUM
INETNUMOBJECT
IRTOBJECT
Abuse Contact Policy
INETNUM’s maintainer authentication AND
IRT object’s authentication(Password / PGP Key)
INETNUM referencing an IRT Object
Referencing an IRT Object
WAY FORWARD
- we are closely following the WEIRDS mailing list
- dev-team is looking into technologies to build RESTFUL services around whois
THANK YOU
AFRINIC DEV-TEAM