Page History

Recommendations on Anonymization Processes for Source IP Addresses Submitted for Future Analysis (R1)

Description:

RSSAC has heard from some members of the technical community that have expressed concern that an increase in traffic from misconfigured resolvers may occur after the October 11th, 2018 date in the rollover plan. RSSAC is not aware of any method able to estimate such a potential load increase. However, RSSAC believes that there is little risk of this occurring and that there will be no impact to the stability of the RSS even if such a load increase occursRecommendation 1: Root Server Operators should consider the advantages and disadvantages of harmonization of anonymization for DITL Data.

RSOs need to decide whether to pursue harmonization of anonymization data that comes from multiple operators, particularly the DITL data. That decision needs to include consideration of the advantages and disadvantages from the standpoint of the RSO, of the users of the RSS, and of researchers looking at the anonymized data.

Harmonization using mixing full addresses or bit-by-bit will help the research community correlate sources of DNS queries across datasets that are collected from different RSOs. However, full harmonization inherently relies on sharing a secret value that will invalidate the anonymization if it is later revealed.

Even if the RSOs decide not to harmonize with sharing of secret values, harmonizing the method used can help RSOs choose an anonymization strategy, and simplify understanding the properties of the data for those who use data from multiple RSOs.

STATUS UPDATES