[cooperation-wg] RIPE NCC Response to the EU’s Cybersecurity Strategy

Hi Patrik,

My friend, what makes you think that root servers will even be relevant in just a few years?  For all intents and purposes, they may well have moved, without anyone having noticed, from their nicely distributed view today, both geographically and politically, to… Cloudflare + one or two others.

If the browsers are going to be sending queries over DoH to Cloudflare or even just to their own infrastructure, aren’t they the root servers?  Maybe occasionally they will query to see if something has changed, but they can decide whether to accept that change.

That is the concern that the commission and ENISA should seriously consider.

Eliot

> On 16 Dec 2020, at 17:15, Patrik Fältström via cooperation-wg <cooperation-wg at ripe.net> wrote:
> 
> On 16 Dec 2020, at 16:29, Marco Hogewoning wrote:
> 
>> Dear colleagues,
>> 
>> Over the last few days, the European Commission has published a number of proposals and strategy documents that lay out its plans for the digital economy. These include the Digital Services Act (DSA), the Digital Markets Act (DMA) and a policy document outlining the European Union's Cybersecurity Strategy for the Digital Decade.
>> 
>> We are currently working through these documents to assess their impact on our operations, the multistakeholder ecosystem and the Internet at large. However, we’ve already seen that the cybersecurity strategy document makes a reference to our role as one of the DNS root server operators based in the EU, with a plan to "assess the role of these operators in guaranteeing that the Internet remains globally accessible in all circumstance.”
>> 
>> We have issued a short public response to this point in particular, which you can find here:
>> https://www.ripe.net/publications/news/announcements/ripe-ncc-response-to-the-eu2019s-cybersecurity-strategy-for-the-digital-decade
>> 
>> Any feedback you might have on this statement is welcome.
> 
> FWIW, as a root server operator being based in the EU we at Netnod fully support what you wrote. Our views are very similar.
> 
> Patrik Fältström
> Technical Director and Head of Security
> Netnod

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/cooperation-wg/attachments/20201218/4e457b6c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: Message signed with OpenPGP
URL: </ripe/mail/archives/cooperation-wg/attachments/20201218/4e457b6c/attachment.sig>