[ncc-services-wg] MD5 Password Security Update Deployed

Dear colleagues,

[Apologies for duplicate emails.]

The RIPE NCC is pleased to announce that the implementation of the MD5
password security change has now been fully deployed. This was discussed
recently on the RIPE Database Working Group mailing list.

The RIPE NCC was asked to implement the technical change as outlined in
this RIPE Labs article:
https://labs.ripe.net/Members/denis/securing-md5-hashes-in-the-ripe-database

This deployment has an impact only when you modify a MNTNER object that
contains an MD5 password. This can only be done using Webupdates. You
must be one of the password holders to make changes.

Operations on all other object types are unchanged.

The RIPE NCC will now:
- Send emails to contact addresses in all MNTNER objects containing MD5
passwords recommending a password change and suggesting that a strong
password be used
- Perform a small MNTNER clean-up by preparing a list of unreferenced
MNTNER objects and deleting those that are still unreferenced one month
later.

If you have not followed this discussion, we recommend that you read the
RIPE Labs article to ensure that you understand the new process for
maintaining MNTNER objects in the RIPE Database.

Regards,

Denis Walker
Business Analyst
RIPE NCC Database Group