Re: [soac-newgtldapsup-wg] Issue for WT2?

[Avri Doria <avri@xxxxxxx>]

Hi,

> Would you put DNSSEC in a similar category of difficulty for local registry 
> services?

No really. 

DNSSEC, while challenging, can be done anywhere.  In the case of IPv6, without  
IPv6 infrastructure in the region there is little one can do, without perhaps 
tunneling.  And I have to admit, I do not understand how that would work at the 
moment (give me time - I  will) - but in any case, I assume it is something 
where assistance of a material sort (at least an endpoint) would be needed to 
enable a registry service provider in a non IPv6 region.  One of the unspoken 
assumptions is that people will only want to be Registry Owners (frontend), 
leaving the Registry Service Provision (backend) to the northern incumbents.  
But in addition to being able to use their local ccTLD service providers, 
creating new registry service providers is an opportunity we might want to 
enable.  In either case, they may need some way to work around this physical 
infrastructure limitation to meet the IPv6 requirements (some northern 
candidates might need it too).

With DNSSEC, assistance might also be needed, but that would be mostly capacity 
building - i.e. how to do it.

a.



On 16 May 2010, at 11:46, Richard Tindal wrote:

> 
> Avri,
> 
> Would you put DNSSEC in a similar category of difficulty for local registry 
> services?
> 
> RT
> 
> 
> On May 16, 2010, at 3:49 AM, Avri Doria wrote:
> 
>> 
>> Hi,
>> 
>> I was rereading DAGv3 and noticed something I had not paid attention to 
>> before (there really is a lot in there)
>> 
>> 5.2.2
>> 
>>> IPv6 support -- Applicant must provision IPv6 service for its
>>> DNS infrastructure. ICANN will review the self-certification
>>> documentation provided by the applicant and will test
>>> IPv6 reachability from various points on the Internet. DNS
>>> transaction capacity over IPv6 for all name servers with
>>> declared IPv6 addresses will also be checked.
>> 
>> I am now wondering how many people, especially in developing regions, are 
>> going to be prevented from starting a Registry - with local registry service 
>> support - on that basis.  I  know they don't need their own registry 
>> services, the can continue to use the processing power of the incumbents and 
>> just bring them the domain names.  But if they want to run their own RSP, 
>> how can they - what solutions are there?
>> 
>> I also wonder though whether this would count as one of the items people 
>> would need technical assistance with - i.e. coming up with ways to meet this 
>> requirement even in areas where there is no native IPv6 support (can IPv4 
>> tunneling techniques be used - and who will provide the support for this - 
>> or the endpoint)?
>> 
>> Perhaps ICANN has already thought of this and it is something that they 
>> intend to advise people on.
>> 
>> a.
>> 
>> 
>> 
>> 
>