[sig-db]prop-010-v001 database protection project update
- To: sig-db at apnic dot net
- Subject: [sig-db]prop-010-v001 database protection project update
- From: Sanjaya <sanjaya at apnic dot net>
- Date: Tue, 06 Apr 2004 10:12:00 +1000
- List-archive: <http://www.apnic.net/mailing-lists/sig-db/>
- List-help: <mailto:sig-db-request@lists.apnic.net?subject=help>
- List-id: APNIC SIG on whois database issues <sig-db.lists.apnic.net>
- List-post: <mailto:sig-db@lists.apnic.net>
- List-subscribe: <http://mailman.apnic.net/mailman/listinfo/sig-db>,<mailto:sig-db-request@lists.apnic.net?subject=subscribe>
- List-unsubscribe: <http://mailman.apnic.net/mailman/listinfo/sig-db>,<mailto:sig-db-request@lists.apnic.net?subject=unsubscribe>
- Sender: sig-db-admin@lists.apnic.net
- User-agent: Mozilla Thunderbird 0.5 (Windows/20040207)
-
Dear colleagues
At APNIC 16, there was consensus for the APNIC Secretariat to increase the level of protection of database objects in the APNIC Whois database.
Therefore, from today, the APNIC Secretariat has deprecated the use of NONE as an authentication attribute. Any maintainer objects that were previously registered as "auth: NONE" have now been updated to be protected by CRYPT-PW password authentication.
From today, the APNIC whois database will only accept authenticated updates using the following methods:
- CRYPT-PW,
- MD5-PW, and
- PGP-KEY.
Also, the APNIC Secretariat has added password protection to MAINT-NULL (the maintainer that was created for migration purposes, which was not previously password protected).
The proposal to increase database protection is available at:
http://www.apnic.net/docs/policy/proposals/prop-010-v001.html
More details of these authentication options are available at:
http://www.apnic.net/db/ref/attributes/mntner/auth-mntner.html
Finally, the APNIC secretariat is also evaluating the use of X.509 certificate (as used in the MyAPNIC system) to authenticate whois database updates, a feature recently introduced to the RIPE community. Background information to this development is available at:
http://www.ripe.net/db/newsflash-20040325.html
Thank you,
Sanjaya
______________________________________________________________________
Sr Project Manager <sanjaya at apnic dot net>
Asia Pacific Network Information Centre (APNIC) Tel: +61-7-3858-3100
PO Box 2131 Milton, QLD 4064 Australia Fax: +61-7-3858-3199
*** See you at APNIC-19 in Fiji, 31 Aug - 3 Sep 2004 ***
______________________________________________________________________