<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
<br>
<div class="moz-cite-prefix">On 4/2/2021 10:31 π.μ., Paul van
Brouwershaven wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DM5PR11MB007321BD355098F877C2D545F8B39@DM5PR11MB0073.namprd11.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type="text/css" style="display:none;">P {margin-top:0;margin-bottom:0;}</style>
<div style=""><span style="font-family: Calibri, Arial, Helvetica,
sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">The problem
is that many DNS providers
</span><span style="font-family: Calibri, Arial, Helvetica,
sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">default
this value to an address of their own. </span></div>
<div style=""><br>
</div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica,
sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Where many
</span><span style="font-family: Calibri, Arial, Helvetica,
sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">in-addr.arpa
</span><span style="font-family: Calibri, Arial, Helvetica,
sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">zones are
probably operated by range owner in some automated system,
some smaller ranges might be delegated to a DNS provider.
There are for example almost 3000 zones hosted on AWS Route
53, some sampling showed that many have the address '</span><span
style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);"><a class="moz-txt-link-abbreviated" href="mailto:awsdns-hostmaster@amazon.com">awsdns-hostmaster@amazon.com</a>'
in the SOA record.</span></div>
<div style=""><br>
</div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica,
sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Some
providers you might be allowed to change it, but if it's not
changed you would make a third party the IP address contact. <br>
</span></div>
</blockquote>
<br>
Regardless of this field being used by ISPs, it is an authorized
area for an IP address holder to add authoritative contact email
information. This is the case for many PI address spaces used today.<br>
<br>
Dimitris.<br>
<br>
<br>
<br>
<blockquote type="cite"
cite="mid:DM5PR11MB007321BD355098F877C2D545F8B39@DM5PR11MB0073.namprd11.prod.outlook.com">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt"
face="Calibri, sans-serif" color="#000000"><b>From:</b>
Servercert-wg <a class="moz-txt-link-rfc2396E" href="mailto:servercert-wg-bounces@cabforum.org"><servercert-wg-bounces@cabforum.org></a> on
behalf of Dimitris Zacharopoulos (HARICA) via Servercert-wg
<a class="moz-txt-link-rfc2396E" href="mailto:servercert-wg@cabforum.org"><servercert-wg@cabforum.org></a><br>
<b>Sent:</b> Thursday, February 4, 2021 08:24<br>
<b>To:</b> CA/B Forum Server Certificate WG Public Discussion
List <a class="moz-txt-link-rfc2396E" href="mailto:servercert-wg@cabforum.org"><servercert-wg@cabforum.org></a><br>
<b>Subject:</b> [EXTERNAL] [Servercert-wg] Update definition
of IP Address Contact in the BRs</font>
<div> </div>
</div>
<div>WARNING: This email originated outside of Entrust.<br>
DO NOT CLICK links or attachments unless you trust the sender
and know the content is safe.<br>
<hr>
I would like to propose an amendment to the definition "IP
Address Contact". Following the example of a "Domain Contact",
for consistency we should allow a CA to use the DNS SOA record
as IP Address Contact information.<br>
<br>
Current definition:<br>
<br>
<i><strong>IP Address Contact</strong></i><i>: The person(s) or
entity(ies) registered with an IP Address Registration
Authority as having the right to control how one or more IP
Addresses are used.</i><br>
<br>
Proposed new definition:<br>
<i><br>
</i><i><strong>IP Address Contact</strong></i><i>: The person(s)
or entity(ies) registered with an IP Address Registration
Authority<font color="#ff0000"> or in a DNS SOA record</font>
as having the right to control how one or more IP Addresses
are used.</i><br>
<br>
Are there any objections or concerns with this proposal?<br>
<br>
<br>
Thank you,<br>
Dimitris.<br>
</div>
</blockquote>
<br>
</body>
</html>