netsec-sig - Re: [Security-WG] DNS Location record question
Subject: Internet2 Network Security SIG
List archive
- From: David Farmer <>
- To:
- Subject: Re: [Security-WG] DNS Location record question
- Date: Tue, 5 Sep 2017 09:42:13 -0500
- Ironport-phdr: 9a23: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
Another option, would be to somewhat obfuscate the precise location by provide the LOC of the nearest major Airport, interstate exit, major highway interchange, city hall, court house, public park, etc... associated with the location. But please do not remove them altogether.
Thanks.
--
On Tue, Sep 5, 2017 at 8:46 AM, Steven Wallace <> wrote:
I use them from time to time (visual traceroute)
I suspect researchers may as well. IMO, the security list is probably not the best place to ask if they’re used.
The LOC below record lists 10,000 meters as its horizontal precision, however the coordinates' precision is about 100 meters.
IMO, leave them, but knock the precision of the lat/long down to .01 rather than .001.
ssw
> On Sep 5, 2017, at 9:26 AM, Paul Howell <> wrote:
>
> Hi,
>
> Currently Internet2 publishes location information for each router in the respective DNS records. Here’s an example:
>
> rtsw.newy32aoa.net.internet2.edu . 3600 IN LOC 40 43 12.248 N 74 0 18.716 W 0.00m 1m 10000m 10m
>
> Would anyone that is using these records please message me? If they are no longer needed, we may remove them.
>
> Regards,
> Paul
>
>
===============================================
David Farmer
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE Phone: 612-626-0815
Minneapolis, MN 55414-3029 Cell: 612-812-9952
===============================================
David Farmer
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE Phone: 612-626-0815
Minneapolis, MN 55414-3029 Cell: 612-812-9952
===============================================
- Re: [Security-WG] DNS Location record question, (continued)
- Re: [Security-WG] DNS Location record question, Jason Zurawski, 09/05/2017
- Re: [Security-WG] DNS Location record question, James Deaton, 09/05/2017
- Re: [Security-WG] DNS Location record question, Chris Wilkinson, 09/05/2017
- Re: [Security-WG] DNS Location record question, Michael H Lambert, 09/05/2017
- Re: [Security-WG] DNS Location record question, Steven Wallace, 09/05/2017
- Re: [Security-WG] DNS Location record question, Matthew J Zekauskas, 09/05/2017
- Re: [Security-WG] DNS Location record question, Michael H Lambert, 09/05/2017
- Re: [Security-WG] DNS Location record question, Steven Wallace, 09/05/2017
- Re: [Security-WG] DNS Location record question, Chris Wilkinson, 09/05/2017
- Re: [Security-WG] DNS Location record question, Jeff Bartig, 09/05/2017
- Re: [Security-WG] DNS Location record question, Michael H Lambert, 09/05/2017
- Re: [Security-WG] DNS Location record question, Matthew J Zekauskas, 09/05/2017
- Re: [Security-WG] DNS Location record question, Steven Wallace, 09/05/2017
- Re: [Security-WG] DNS Location record question, Michael H Lambert, 09/05/2017
- Re: [Security-WG] DNS Location record question, Jason Zurawski, 09/05/2017
- Re: [Security-WG] DNS Location record question, David Farmer, 09/05/2017
- Re: [Security-WG] DNS Location record question, Paul Howell, 09/05/2017
Archive powered by MHonArc 2.6.19.