Re: [ire] Data escrow deposit validation tool

"Gould, James" <JGould@verisign.com> Wed, 13 March 2013 21:36 UTC

Return-Path: <JGould@verisign.com>
X-Original-To: ire@ietfa.amsl.com
Delivered-To: ire@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34AAC11E80C5 for <ire@ietfa.amsl.com>; Wed, 13 Mar 2013 14:36:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.684
X-Spam-Level:
X-Spam-Status: No, score=-5.684 tagged_above=-999 required=5 tests=[AWL=-0.401, BAYES_00=-2.599, EXTRA_MPART_TYPE=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, SARE_MILLIONSOF=0.315]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w4vmCyVX6Oz7 for <ire@ietfa.amsl.com>; Wed, 13 Mar 2013 14:36:19 -0700 (PDT)
Received: from exprod6og106.obsmtp.com (exprod6og106.obsmtp.com [64.18.1.191]) by ietfa.amsl.com (Postfix) with ESMTP id 825E421F8A98 for <ire@ietf.org>; Wed, 13 Mar 2013 14:35:58 -0700 (PDT)
Received: from peregrine.verisign.com ([216.168.239.74]) (using TLSv1) by exprod6ob106.postini.com ([64.18.5.12]) with SMTP ID DSNKUUDxPX4iLRXYuW9Egn/RS3VMI2iEoIwI@postini.com; Wed, 13 Mar 2013 14:36:19 PDT
Received: from BRN1WNEXCHM01.vcorp.ad.vrsn.com (brn1wnexchm01.vcorp.ad.vrsn.com [10.173.152.255]) by peregrine.verisign.com (8.13.6/8.13.4) with ESMTP id r2DLZspo015831 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 13 Mar 2013 17:35:54 -0400
Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by BRN1WNEXCHM01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.02.0342.003; Wed, 13 Mar 2013 17:35:53 -0400
From: "Gould, James" <JGould@verisign.com>
To: Gustavo Lozano <gustavo.lozano@icann.org>, "ire@ietf.org" <ire@ietf.org>
Thread-Topic: [ire] Data escrow deposit validation tool
Thread-Index: Ac4f8f/wCW8g8+qiQviFQ/ZRkBb7OAAQLSeA
Date: Wed, 13 Mar 2013 21:35:53 +0000
Message-ID: <CD6612C6.4ADF7%jgould@verisign.com>
In-Reply-To: <CD65D2AB.CD0E%gustavo.lozano@icann.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.3.1.130117
x-originating-ip: [10.173.152.4]
Content-Type: multipart/related; boundary="_004_CD6612C64ADF7jgouldverisigncom_"; type="multipart/alternative"
MIME-Version: 1.0
Subject: Re: [ire] Data escrow deposit validation tool
X-BeenThere: ire@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Internet Registration Escrow discussion list." <ire.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ire>, <mailto:ire-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ire>
List-Post: <mailto:ire@ietf.org>
List-Help: <mailto:ire-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ire>, <mailto:ire-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Mar 2013 21:36:20 -0000

Gustavo,

The "Data escrow agent extended verification" fundamentally changes the responsibilities of a data escrow provider, which can and will increase the cost of the data escrow.  Data escrow providers today are responsible for ensuring the completeness of the deposits and for storing them.  They have no idea of the data content including its syntactic and semantic structure.  Right now the extended validation process is optional in the draft, but if and when it becomes a requirement for the data escrow providers, it would need to be vetted out by the broader community.

If extended validation does become a requirement, then a standardized open source tool is a good idea and is  a minimum requirement to ensure that all data escrow providers execute the same validation.  We may be able to contribute to this effort.

Thanks,

--

JG

[cid:195536F0-7E46-44B2-88AE-82E8B9FEB1E2]

James Gould
Principal Software Engineer
jgould@verisign.com

703-948-3271 (Office)
12061 Bluemont Way
Reston, VA 20190
VerisignInc.com

From: Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>
Date: Wednesday, March 13, 2013 9:52 AM
To: "ire@ietf.org<mailto:ire@ietf.org>" <ire@ietf.org<mailto:ire@ietf.org>>
Subject: [ire] Data escrow deposit validation tool

Colleagues,

The Internet Draft: http://www.ietf.org/id/draft-arias-noguchi-dnrd-objects-mapping-02.txt, describes a "Data escrow agent extended verification" process.

The data escrow deposits are valuable if they can be used when needed, basically during an emergency.

The creation of an open source data escrow deposit validation tool is an important step to mitigate risks related to the quality of the escrow deposit. This tool could be used by data escrow agents, registries and EBEROs.

Who is interested in participating in the development of such a tool?

Basically, the tool should receive as input a full and optionally several differential deposits. After applying the deltas the tool should perform the tests listed in the draft. The tool should be able to handle deposits of at least several millions of objects.

Regards,
Gustavo