Los Angeles 2007

1. Brief Updates Steve Crocker, SSAC Chair

• IDN Study
• Whois/SPAM Report
• DNS Fast Flux Attacks

2. Registry Services Technical Evaluation Panel Update - Lyman Chapin, RSTEP Chair

The RSTEP was created to provide fast responses when
a new registry service is proposed and there are questions about
possible security and/or stability issues.

3. Domain Name Front Running Dave Piscitello, SSAC Fellow

This presentation considers the opportunity for a party with some form of insider information to anticipate an Internet user's preference for registering a domain name and preemptively register that name. SSAC likens this activity to insider trading in stock and commodities markets and calls this behavior domain name front running. In the case of front running, insider information would manifest itself as some form of monitoring of one or more attempts by an Internet user to check the availability of a domain name before registering that name. This is a call for public comment.
We invite all parties who have information regarding a possible front running incident to report it to the committee with as much information as possible to assist SSAC in studying this matter further.

4. Survey of IPv6 Support in Firewalls- Dave Piscitello, SSAC Fellow

Commercial firewall vendors were contacted and asked to complete a survey regarding IPv4 and IPv6 networking and security service support in currently available products. Vendor responses were analyzed and key findings are illustrated in an aggregated fashion.

5. IPv6 Adoption Roundtable

Steve Crocker, Moderator | Fred Baker, Cisco | Vint Cerf, Google | Thomas Narten, IBM

The IPv4 address pool is almost empty. Projections suggest the last
allocation will be made by IANA within the next five years, and the
RIRs will run out of addresses to allocate relatively soon after that.
Recovery of unused or lightly used blocks of IPv4 address space will be
difficult and even if such recovery is successful, it won't change the
overall picture by more than one year.
The planned solution has been IPv6. The IPv6 address space is
extraordinarily large, and it should suffice to meet the needs of the
Internet community essentially forever. However, the adoption of IPv6
has been slow, and it's not clear what the path will be.
On the plus side, more products, particularly PC operating systems such
as Mac/OS and Microsoft Vista, are fully IPv6-enabled out of the box.
On the minus side, there are very few IPv6 networks, even fewer service
providers offering content or other services over IPv6 networks. It's
also clear that the transition will not result in the complete
replacement of IPv4 by IPv6. The public Internet will have to support
IPv4 transport for at least another 20 years and probably more.
The purpose of this roundtable is to pose some of the hard questions to
some very knowledgeable people and bring to the surface a better
picture of the forthcoming transition issues.

• Where is the pinch going to be felt? That is, when
  IPv4 addresses become scarce, who will be in trouble and need to look
  at IPv6?
• There will undoubtedly be pockets of pure IPv6 networks. How will these interact with the existing IPv4 sites?
• When will there be global IPv6 connectivity? What are the steps to get there and where are we as of now?
• What impediments and incentives are ISPs seeing? Are IPv6 capable
  products such as routers, network management systems, etc. available
  and competitive in price and performance with their IPv4 counterparts?
• What impediments and incentives are enterprises seeing?
• What
  impediments and incentives are content providers seeing? When will
  content providers offer their content equally over IPv6 and IPv4
  transports?
• Are there any strong players? What role have various governments played? Which companies are playing a major role?
• Who
  has responsibility for promoting the implementation and use of IPv6 -
  what roles are there to play and who, if anyone, is playing them? What
  new roles and players are missing?