WHOIS UPDATES

WHOIS UPDATES

- DNSSEC Deployment

- Full support for ASPLAIN

- Abuse Contact Implementation

Three Main Updates

DNSSEC

DNSSEC

- One part of DNSSEC deployment plan- Minor change in WHOIS - ds-rdata attribute- Two methods for updating this field

- Via MyAfrinic (with verification)- [email protected] (without verification)

Domain Object template

DNSSEC

Reverse Delegation on MyAFRINIC

DNSSEC

Example of Domain object on WHOISDNSSEC

ASPLAIN

- Full Support for 4-Byte ASN- Scrap out the dot format

- <high order 16 bit value in decimal>.<low order 16 bit value in decimal>

- 4-byte AS Number of value 65546 (decimal) would be identified as "1.10”

- Both WHOIS and Myafrinic support this format

ASPLAIN

Example of previously AS5.1 in plain format

ASPLAIN

Abuse contact Policy

Abuse Contact Policy AFPUB-2010-GEN-006 Recommendations:

For abuse reports to reach the correct network contact

Create a new or uses an already existing object A unique reference by inetnum, inet6num and

aut-num Contains 2 email attributes: "e-mail:" for personal communication "abuse-mailbox:" for automatic report handling

Abuse Contact Policy - Use existing Incident Response Team Object

Abuse Contact PolicyIRT Object

- Field: abuse-mailbox Abuse Contact email addressMandatoryMultiple

- whois -i abuse-mailbox <email>

- Field: emailAbuse Contact email addressMandatoryMultiple

Abuse Contact PolicyIRT Object

Field: auth Authentication credentials

Password or PGP Key Used when adding or removing a reference to inetnum,

inet6num or aut-num objects Mandatory Multiple

whois -i auth <email>

Abuse Contact Policy

IRT Object Field: irt-nfy Notify email address Optional Multiple

whois -i irt-nfy <email>

Abuse Contact Policy

]

Abuse Contact Policy

INETNUM Object Field: mnt-irt Reference an IRT object Optional Multiple

whois -i mnt-irt <IRT ID> Similarly in INET6NUM and AUT-NUM

INETNUMOBJECT

IRTOBJECT

Abuse Contact Policy

INETNUM’s maintainer authentication AND

IRT object’s authentication(Password / PGP Key)

INETNUM referencing an IRT Object

Referencing an IRT Object

WAY FORWARD

- we are closely following the WEIRDS mailing list

- dev-team is looking into technologies to build RESTFUL services around whois

THANK YOU

AFRINIC DEV-TEAM