Skip to Content.
Sympa Menu

netsec-sig - Re: [Security-WG] DNS Location record question

Subject: Internet2 Network Security SIG

List archive

Re: [Security-WG] DNS Location record question


Chronological Thread 
  • From: Paul Howell <>
  • To: "" <>
  • Subject: Re: [Security-WG] DNS Location record question
  • Date: Tue, 5 Sep 2017 15:19:54 +0000
  • Accept-language: en-US
  • Authentication-results: internet2.edu; dkim=none (message not signed) header.d=none;internet2.edu; dmarc=none action=none header.from=internet2.edu;
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticoutput: 1:0

Thanks everyone for the comments, it looks like some people are using the LOC records, which is what I was interested in.

 

Regards,

Paul

 

From: <> on behalf of David Farmer <>
Reply-To: "" <>
Date: Tuesday, September 5, 2017 at 10:42 AM
To: "" <>
Subject: Re: [Security-WG] DNS Location record question

 

Another option, would be to somewhat obfuscate the precise location by provide the LOC of the nearest major Airport, interstate exit, major highway interchange, city hall, court house, public park, etc... associated with the location.  But please do not remove them altogether.

 

Thanks.

 

On Tue, Sep 5, 2017 at 8:46 AM, Steven Wallace <> wrote:

I use them from time to time (visual traceroute)

I suspect researchers may as well. IMO, the security list is probably not the best place to ask if they’re used.

The LOC below record lists 10,000 meters as its horizontal precision, however the coordinates' precision is about 100 meters.

IMO, leave them, but knock the precision of the lat/long down to .01 rather than .001.

ssw


> On Sep 5, 2017, at 9:26 AM, Paul Howell <> wrote:
>
> Hi,
>
> Currently Internet2 publishes location information for each router in the respective DNS records.  Here’s an example:
>
> rtsw.newy32aoa.net.internet2.edu. 3600 IN LOC 40 43 12.248 N 74 0 18.716 W 0.00m 1m 10000m 10m
>
> Would anyone that is using these records please message me?    If they are no longer needed, we may remove them.
>
> Regards,
> Paul
>
>



 

--

===============================================
David Farmer              
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota  
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================




Archive powered by MHonArc 2.6.19.

Top of Page