KSK Sentinel KSK Sentinel draftietfdnsopkskrollsentinel Geoff - PowerPoint PPT Presentation

Apr 12, 2023 •421 likes •541 views

KSK Sentinel KSK Sentinel draftietfdnsopkskrollsentinel Geoff Huston Geoff Huston Joao Silva Damas Joao Silva Damas Warren Kumari Warren Kumari DNSSEC, .PR 201803 v0.3 1 What's the problem? What's the problem? We need want

KSK Sentinel KSK Sentinel draftietfdnsopkskrollsentinel Geoff Huston Geoff Huston Joao Silva Damas Joao Silva Damas Warren Kumari Warren Kumari DNSSEC, .PR 201803 v0.3 1
What's the problem? What's the problem? We need want to roll the DNSSEC trust-anchor (KSK) Users with a validating resolver that doesn't have the new KSK break; everything looks BOGUS We have no way of measuring deployment, and so don't know who (and how many!) will break 2
Wait! RFC8145?! Wait! RFC8145?! Sadly, no. This provides reporting from resolvers I have a validating resolver in my basement... it doesn't have the new key :-( but no-one is using it :-) If a resolver falls in the forest, but no-one is using it, does it matter?! 3
Pretty graphs! Pretty graphs! ? 4
Sentinel Sentinel 1. Requires a (simple) resolver update 2. Allows anyone to set up a measurement service 3. Exposes the result to the users The change The change Just before sending the response (after resolution, validation): kskrollsentinelista[key].something? If have the key, reply normally, else SERVFAIL kskrollsentinelnotta[key].something? If do NOT have the key, reply normally, else SERVFAIL 5
Example Example I'm a validating resolver. I support sentinel. I have the new KSK (20326) I get a query for invalid.example.com It fails DNSSEC validation - SERVFAIL I get a query for kskrollsentinelista20326.example.com I resolve it and get 192.0.2.23 I have (and am using) KeyID 20326 answer with 192.0.2.23 I get a query for kskrollsentinelnotta20326.example.com I do have (and am using) KeyID 20326 send SERVFAIL 6
Yawn. So what?! Yawn. So what?! Do you see: Fish? Not validating, key-roll doesn't affect you. Kitten and Puppy? Legacy, we cannot tell. Kitten? You have the new key, you'll be fine. Puppy? DANGER ! You only have the old key. 7
Srsly? Kittens?! Srsly? Kittens?! Sadly, no... 8
...but kittens!!! ...but kittens!!! Sorry, still no... :-( Demo: http://www.ksk-test.net: 9
Questions Questions? 10

Recommend

Topics for Discussion What is a sentinel lymph node (SLN)? Utility of sentinel lymph biopsies:

5/17/2013 Topics for Discussion What is a sentinel lymph node (SLN)? Utility of sentinel lymph biopsies: therapeutic or staging? Thin Melanoma and Sentinel Node Dissection Groin Mapping Superficial/Deep Current Treatment of Timing of

581 views • 18 slides

SENTINEL TESTING, RESULTS TO DATE TOTAL NUMBERS: Inmates have been tested at the Butte

MONTANA DEPARTMENT OF CORRECTIONS + COVID-19 RESPONSE UPDATE LAW AND JUSTICE INTERIM COMMITTEE JUNE 30, 2020 + COVID-19 SENTINEL TESTING AT DOC FACILITIES + COVID-19 SENTINEL TESTING MAY 21, 2020 DOC started sentinel testing of

511 views • 12 slides

Mini-Sentinel Common Data Model Lesley Curtis on behalf of the Mini-Sentinel Data Core May 8,

Mini-Sentinel Common Data Model Lesley Curtis on behalf of the Mini-Sentinel Data Core May 8, 2013 info@mini-sentinel.org 1 Guiding principles (selected) Accommodates all requirements of Mini-Sentinel and can evolve to meet expanded

254 views • 10 slides

Sentinel Landscapes Sentinel Landscapes are working or natural lands important to the Nations

Sentinel Landscapes Sentinel Landscapes are working or natural lands important to the Nations defense mission places where preserving the working and rural character of key landscapes strengthens farms, ranches, and forests economically;

307 views • 11 slides

Status of Sentinel-1 and acquisition plans for GFOI Frank Martin Seifert, Pierre Potin, Johannes

Status of Sentinel-1 and acquisition plans for GFOI Frank Martin Seifert, Pierre Potin, Johannes Roeder, ESA Earth Observation Programme 5 th Space Data Coordination, ESRIN, Frascati, 24 February 2014 GMES Sentinel Missions Sentinel 1

268 views • 16 slides

Sentinel Mine & Enterprise Project Analyst presentation October 2015 1 Trident Project

Sentinel Mine & Enterprise Project Analyst presentation October 2015 1 Trident Project location 2 Orientation project layout YOU ARE HERE 3 Sentinel Mine 4 Total Sentinel capex $2.1billion Total Sentinel capex = approx

352 views • 33 slides

Sentinel Initiative Public Workshop The Brookings Institution Marriott Wardman Park Washington,

Sentinel Initiative Public Workshop The Brookings Institution Marriott Wardman Park Washington, DC January 31, 2013 Development of the Sentinel System through Public-Private Collaboration FDA awards Mini-Sentinel Brookings able to query

316 views • 3 slides

FDA's Mini Sentinel Program to FDA s Mini Sentinel Program to Evaluate the Safety of Marketed

FDA's Mini Sentinel Program to FDA s Mini Sentinel Program to Evaluate the Safety of Marketed Medical Products d l d Update and Focus on Communications Focus on Communications Richard Platt Harvard Pilgrim Health Care Institute Harvard

408 views • 29 slides

Leaders Meeting Sentinel event Annual report 2016-17 Overview Update re Incident Response Team

Quarterly Quality & Safety Leaders Meeting Sentinel event Annual report 2016-17 Overview Update re Incident Response Team Summary of Sentinel Event data 2013-2017 Overview of Sentinel Event data 2016/17 Ambitions for 2018+ Sentinel Event

235 views • 21 slides

FDA Mini-Sentinel as a National Resource Jeffrey Brown Harvard Pilgrim Health Care Institute

Opportunities to Expand the Public Health Impact of the Sentinel Initiative FDA Mini-Sentinel as a National Resource Jeffrey Brown Harvard Pilgrim Health Care Institute Harvard Medical School January 31, 2013 info@mini-sentinel.org 1 Outline

476 views • 16 slides

Sentinel-1 Constellation SAR Interferometry Performance Verification Dirk Geudtner, Pau Prats,

Sentinel-1 Constellation SAR Interferometry Performance Verification Dirk Geudtner, Pau Prats, Nestor Yague-Martinz, Francesco De Zan, Helko Breit, Yngvar Larsen, Andrea Monti-Guaneri and Ramn Torres 1 Sentinel 1 Mission Facts A

484 views • 30 slides

Promises and Challenges of Screening for Adverse Events in Sentinel Michael D. Nguyen, MD FDA

Promises and Challenges of Screening for Adverse Events in Sentinel Michael D. Nguyen, MD FDA Sentinel Lead Office of Surveillance and Epidemiology Center for Drug Evaluation and Research August 28, 2017 Plan for Talk When and why does

570 views • 23 slides

Sentinel Defensive Fund Fund Manager Quarterly Review November 2008 For professional adviser

Sentinel Defensive Fund Fund Manager Quarterly Review November 2008 For professional adviser use only To watch over and guard Headlines Sentinel Defensive Fund Tough start for the Fund Sentinel Perfect storm Falling

202 views • 17 slides

Arrive, enjoy refreshments, chat to old friends A Presentation commences @ 10:00 B Sentinel

01-Aug-19 Arrive, enjoy refreshments, chat to old friends A Presentation commences @ 10:00 B Sentinel Retirement Funds Standing 1 Interesting Pensioner Statistics 2 Sentinel Investments 3 Up-To-Date Pension Increase Indicators 4

824 views • 18 slides

Sentinel Landscapes Develop compatible land use partnerships to reduce encroachment pressures and

Sentinel Landscapes Develop compatible land use partnerships to reduce encroachment pressures and incompatible land uses that threaten the militarys mission by protecting working lands and critical natural resources North Carolina Sentinel

524 views • 20 slides

Sentinel and alert system (detection of new WRDs), by the network of French Occupational Diseases

Methodologies to identify work-related diseases (WRD) Review on sentinel and alert systems Seminar to discuss the current approaches, Brussels 18 May 2017 Sentinel and alert system (detection of new WRDs), by the network of French Occupational

1.03k views • 60 slides

Bike/Quad You will be equipped with a GPS Unik 2 with Sentinel into; it will be given during

GPS Unik 2 with Sentinel into You are already equipped? Keep your equipments performance. Although the technology is a key, there are, nevertheless, good reflexes to be adopted for an optimal functioning: - Check the mounting and the connection

314 views • 4 slides

LAW AND JUSTICE INTERIM COMMITTEE UPDATE September 14, 2020 The DOCs sentinel testing

MONTANA DEPARTMENT OF CORRECTIONS LAW AND JUSTICE INTERIM COMMITTEE UPDATE September 14, 2020 The DOCs sentinel testing efforts have resumed at DOC-run and DOC-contracted facilities (30-50 sentinel tests per week) Symptomatic testing

275 views • 12 slides

Studying Rotavirus Vaccines and Intussusception in Mini-Sentinel W. Katherine Yih, PhD, MPH

Studying Rotavirus Vaccines and Intussusception in Mini-Sentinel W. Katherine Yih, PhD, MPH Harvard Pilgrim Health Care Institute and Harvard Medical School January 31, 2013 info@mini-sentinel.org 1 Rotavirus vaccines Live, attenuated,

399 views • 18 slides

Water masks from Sentinel-1 : Why ? dynamic water masks (every 12 days) : all weather, night

A step towards the automated production of Water Masks from Sentinel-1 SAR images Pierre Fabry, Nicolas Bercher Brest & Toulouse, France Water masks from Sentinel-1 : Why ? dynamic water masks (every 12 days) : all weather, night and

903 views • 54 slides

Bray Patrick-Lake, BS, MFS Disclosures FDA Patient Representative Mini-Sentinel National

Mini-Sentinel from Vision to Reality: A Patient Representatives Perspective Bray Patrick-Lake, BS, MFS Disclosures FDA Patient Representative Mini-Sentinel National Planning Board Clinical Trials Transformation Initiative Steering

204 views • 8 slides

Sentinel Lymph Nodes for Breast Carcinoma: A Paradigm Shift Edi Brogi MD PhD Attending

Sentinel Lymph Nodes for Breast Carcinoma: A Paradigm Shift Edi Brogi MD PhD Attending Pathologist Director of Breast Pathology Sentinel Lymph Nodes 2014 AJCC 2010 staging Micrometastases Occult metastases Z0011 and B-32:

1.07k views • 94 slides

Modular Programs Sebastian Schneeweiss, MD, ScD Jennifer Nelson, PhD Mini-Sentinel Methods Core

Modular Programs Sebastian Schneeweiss, MD, ScD Jennifer Nelson, PhD Mini-Sentinel Methods Core January 31, 2013 info@mini-sentinel.org 1 Modular approach to drug safety monitoring in a distributed database system Principal idea

579 views • 18 slides

FDAs Mini-Sentinel Program Update for the Brookings Active Surveillance Implementation Council

FDAs Mini-Sentinel Program Update for the Brookings Active Surveillance Implementation Council Richard Platt, MD, MSc Harvard Pilgrim Health Care Institute and Harvard Medical School June 1, 2011 info@mini-sentinel.org 4 Stages of

604 views • 25 slides