the regrr protocol
play

The REGRR protocol Daniel Kalchev, Register.BG ICANN48, Buenos - PowerPoint PPT Presentation

The REGRR protocol Daniel Kalchev, Register.BG ICANN48, Buenos Aires 16-21 Nov 2013 Register.BG REGRR Protocol Protocol design Signed XML messages over encrypted communication channel No need to keeping session or state at the server


  1. The REGRR protocol Daniel Kalchev, Register.BG ICANN48, Buenos Aires 16-21 Nov 2013 Register.BG REGRR Protocol

  2. Protocol design • Signed XML messages over encrypted communication channel • No need to keeping session or state at the server • Each message carries full authentication and authorization properties by virtue of digital signatures • Regular command:object structure • Nested message structure • Nomenclature versions are communicated with each message • The various nomenclature lists can be communicated between server and client ICANN48, Buenos Aires 16-21 Nov 2013 Register.BG REGRR Protocol

  3. What REGRR achieves • Secure communication with Registrars • Secure communication with Registrants • End to end encryption and signing • Separate authorization of the Registrant and Registrar to modify Registry data • Follows contractual relationships • Solves the issues of Registrars having too much control over Registrant data ICANN48, Buenos Aires 16-21 Nov 2013 Register.BG REGRR Protocol

  4. How it works • The Registrant prepares and signs the message, possibly via the Registrar interface (could be web based or other protocol) • The Registrar signs the Registrant message and communicates it to the Registry • The Registry authenticates sources based on digital certificates and authorizes object modification based on object ownership and assigned rights • The Registrant could authorize the Registrar to submit messages on their behalf • The Registrant can communicate messages directly with the Registry, providing for secure updates for DNS and DNSSEC data. ICANN48, Buenos Aires 16-21 Nov 2013 Register.BG REGRR Protocol

  5. Current implementations • Implemented and published 2011 by Register.BG • Three of .BG’s Registrars at various implementation levels • Current server implementation runs on TLS/TCP • Specification/documentation being translated to English… ICANN48, Buenos Aires 16-21 Nov 2013 Register.BG REGRR Protocol

  6. Thank You Daniel Kalchev, Register.BG daniel@digsys.bg ICANN48, Buenos Aires 16-21 Nov 2013 Register.BG REGRR Protocol

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend