ACSP Suggestion 2013.14: Sign ARIN's forward DNS zone

Author: David Farmer

Submitted On: 26 April 2013

Suggestion

The arin.net zone and in particular www.arin.net does not seem to be DNS Sec signed. It would be good for ARIN to demonstrate their leadership in the Internet technical community and sign their forward DNS zone, arin.net. As an example both Lacnic and RIPE have signed their forward zones.

If this means changing DNS registrars, then please do so.

Thank you.

Timeframe: Immediate

Suggestion Information

Status: Closed

Updated: 1 July 2014

Suggestion Tracking

ARIN Comment

22 May 2013

We will add this additional feature to a planned upgrade to our existing DNSSEC signing services and roll out signed forward zones that ARIN is authoritative for by Q2 of 2014.

This suggestion will remain open.

ARIN Comment

1 July 2014

On 1 July 2014, ARIN announced the completion of this work to the community:

I am happy to inform the community that the arin.net and arin.com zones have been officially signed as part of our commitment to Domain Name System Security (DNSSEC) throughout the ARIN region and global Internet community. ARIN has been signing the reverse /8 zones it manages for over the past five years.

ARIN continues to encourage all members of the Internet community to implement DNSSEC for their own forward and reverse zones to help secure the Domain Name System as the Internet continues to grow and evolve.

For more information about DNS and how you can utilize ARIN's DNSSEC tools to secure your network, visit:

https://www.arin.net/resources/dnssec/index.html