{"action":"opened","number":93,"pull_request":{"url":"https://api.github.com/repos/desec-io/desec-stack/pulls/93","id":174945889,"html_url":"https://github.com/desec-io/desec-stack/pull/93","diff_url":"https://github.com/desec-io/desec-stack/pull/93.diff","patch_url":"https://github.com/desec-io/desec-stack/pull/93.patch","issue_url":"https://api.github.com/repos/desec-io/desec-stack/issues/93","number":93,"state":"open","locked":false,"title":"fix(api): reduce NSEC3 iterations to 127","user":{"login":"peterthomassen","id":4242683,"avatar_url":"https://avatars2.githubusercontent.com/u/4242683?v=4","gravatar_id":"","url":"https://api.github.com/users/peterthomassen","html_url":"https://github.com/peterthomassen","followers_url":"https://api.github.com/users/peterthomassen/followers","following_url":"https://api.github.com/users/peterthomassen/following{/other_user}","gists_url":"https://api.github.com/users/peterthomassen/gists{/gist_id}","starred_url":"https://api.github.com/users/peterthomassen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/peterthomassen/subscriptions","organizations_url":"https://api.github.com/users/peterthomassen/orgs","repos_url":"https://api.github.com/users/peterthomassen/repos","events_url":"https://api.github.com/users/peterthomassen/events{/privacy}","received_events_url":"https://api.github.com/users/peterthomassen/received_events","type":"User","site_admin":false},"body":"RFC5155, Sec. 10.3 describes NSEC3 iteration count limits based on RSA\r\nand DSA usage scenarios.  As we are using ECDSA 512-bit keys that are\r\nroughly equivalent to a ~3100 RSA key, we picked an NSEC3 iteration\r\ncount that would be in the allowable range for such an RSA key.\r\n\r\nHowever, practical experience [1] shows that many resolvers insist on\r\nthe maximum iteration count as applicable to a 512 RSA key.  As RFC5155\r\ndoes not discuss ECDSA keys, they cannot really be blamed.  It is thus\r\nrecommendable to lower the count to <= 150.  127 seems like a good\r\nvalue [2].\r\n\r\n  [1]: https://www.mail-archive.com/dnsop@ietf.org/msg16148.html\r\n  [2]: https://lists.dns-oarc.net/pipermail/dns-operations/2018-January/017174.html\r\n\r\nCredits: Viktor Dukhovni","created_at":"2018-03-14T12:55:11Z","updated_at":"2018-03-14T12:55:11Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":{"login":"peterthomassen","id":4242683,"avatar_url":"https://avatars2.githubusercontent.com/u/4242683?v=4","gravatar_id":"","url":"https://api.github.com/users/peterthomassen","html_url":"https://github.com/peterthomassen","followers_url":"https://api.github.com/users/peterthomassen/followers","following_url":"https://api.github.com/users/peterthomassen/following{/other_user}","gists_url":"https://api.github.com/users/peterthomassen/gists{/gist_id}","starred_url":"https://api.github.com/users/peterthomassen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/peterthomassen/subscriptions","organizations_url":"https://api.github.com/users/peterthomassen/orgs","repos_url":"https://api.github.com/users/peterthomassen/repos","events_url":"https://api.github.com/users/peterthomassen/events{/privacy}","received_events_url":"https://api.github.com/users/peterthomassen/received_events","type":"User","site_admin":false},"assignees":[{"login":"peterthomassen","id":4242683,"avatar_url":"https://avatars2.githubusercontent.com/u/4242683?v=4","gravatar_id":"","url":"https://api.github.com/users/peterthomassen","html_url":"https://github.com/peterthomassen","followers_url":"https://api.github.com/users/peterthomassen/followers","following_url":"https://api.github.com/users/peterthomassen/following{/other_user}","gists_url":"https://api.github.com/users/peterthomassen/gists{/gist_id}","starred_url":"https://api.github.com/users/peterthomassen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/peterthomassen/subscriptions","organizations_url":"https://api.github.com/users/peterthomassen/orgs","repos_url":"https://api.github.com/users/peterthomassen/repos","events_url":"https://api.github.com/users/peterthomassen/events{/privacy}","received_events_url":"https://api.github.com/users/peterthomassen/received_events","type":"User","site_admin":false}],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":450873893,"url":"https://api.github.com/repos/desec-io/desec-stack/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"milestone":null,"commits_url":"https://api.github.com/repos/desec-io/desec-stack/pulls/93/commits","review_comments_url":"https://api.github.com/repos/desec-io/desec-stack/pulls/93/comments","review_comment_url":"https://api.github.com/repos/desec-io/desec-stack/pulls/comments{/number}","comments_url":"https://api.github.com/repos/desec-io/desec-stack/issues/93/comments","statuses_url":"https://api.github.com/repos/desec-io/desec-stack/statuses/7bcae63779317a3d62fc2e20935b5b5e03f528f2","head":{"label":"desec-io:20180314_NSEC3iterations","ref":"20180314_NSEC3iterations","sha":"7bcae63779317a3d62fc2e20935b5b5e03f528f2","user":{"login":"desec-io","id":22482887,"avatar_url":"https://avatars3.githubusercontent.com/u/22482887?v=4","gravatar_id":"","url":"https://api.github.com/users/desec-io","html_url":"https://github.com/desec-io","followers_url":"https://api.github.com/users/desec-io/followers","following_url":"https://api.github.com/users/desec-io/following{/other_user}","gists_url":"https://api.github.com/users/desec-io/gists{/gist_id}","starred_url":"https://api.github.com/users/desec-io/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/desec-io/subscriptions","organizations_url":"https://api.github.com/users/desec-io/orgs","repos_url":"https://api.github.com/users/desec-io/repos","events_url":"https://api.github.com/users/desec-io/events{/privacy}","received_events_url":"https://api.github.com/users/desec-io/received_events","type":"Organization","site_admin":false},"repo":{"id":69393808,"name":"desec-stack","full_name":"desec-io/desec-stack","owner":{"login":"desec-io","id":22482887,"avatar_url":"https://avatars3.githubusercontent.com/u/22482887?v=4","gravatar_id":"","url":"https://api.github.com/users/desec-io","html_url":"https://github.com/desec-io","followers_url":"https://api.github.com/users/desec-io/followers","following_url":"https://api.github.com/users/desec-io/following{/other_user}","gists_url":"https://api.github.com/users/desec-io/gists{/gist_id}","starred_url":"https://api.github.com/users/desec-io/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/desec-io/subscriptions","organizations_url":"https://api.github.com/users/desec-io/orgs","repos_url":"https://api.github.com/users/desec-io/repos","events_url":"https://api.github.com/users/desec-io/events{/privacy}","received_events_url":"https://api.github.com/users/desec-io/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/desec-io/desec-stack","description":"Basic stack for deSEC name services, implemented as a docker-compose application","fork":false,"url":"https://api.github.com/repos/desec-io/desec-stack","forks_url":"https://api.github.com/repos/desec-io/desec-stack/forks","keys_url":"https://api.github.com/repos/desec-io/desec-stack/keys{/key_id}","collaborators_url":"https://api.github.com/repos/desec-io/desec-stack/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/desec-io/desec-stack/teams","hooks_url":"https://api.github.com/repos/desec-io/desec-stack/hooks","issue_events_url":"https://api.github.com/repos/desec-io/desec-stack/issues/events{/number}","events_url":"https://api.github.com/repos/desec-io/desec-stack/events","assignees_url":"https://api.github.com/repos/desec-io/desec-stack/assignees{/user}","branches_url":"https://api.github.com/repos/desec-io/desec-stack/branches{/branch}","tags_url":"https://api.github.com/repos/desec-io/desec-stack/tags","blobs_url":"https://api.github.com/repos/desec-io/desec-stack/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/desec-io/desec-stack/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/desec-io/desec-stack/git/refs{/sha}","trees_url":"https://api.github.com/repos/desec-io/desec-stack/git/trees{/sha}","statuses_url":"https://api.github.com/repos/desec-io/desec-stack/statuses/{sha}","languages_url":"https://api.github.com/repos/desec-io/desec-stack/languages","stargazers_url":"https://api.github.com/repos/desec-io/desec-stack/stargazers","contributors_url":"https://api.github.com/repos/desec-io/desec-stack/contributors","subscribers_url":"https://api.github.com/repos/desec-io/desec-stack/subscribers","subscription_url":"https://api.github.com/repos/desec-io/desec-stack/subscription","commits_url":"https://api.github.com/repos/desec-io/desec-stack/commits{/sha}","git_commits_url":"https://api.github.com/repos/desec-io/desec-stack/git/commits{/sha}","comments_url":"https://api.github.com/repos/desec-io/desec-stack/comments{/number}","issue_comment_url":"https://api.github.com/repos/desec-io/desec-stack/issues/comments{/number}","contents_url":"https://api.github.com/repos/desec-io/desec-stack/contents/{+path}","compare_url":"https://api.github.com/repos/desec-io/desec-stack/compare/{base}...{head}","merges_url":"https://api.github.com/repos/desec-io/desec-stack/merges","archive_url":"https://api.github.com/repos/desec-io/desec-stack/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/desec-io/desec-stack/downloads","issues_url":"https://api.github.com/repos/desec-io/desec-stack/issues{/number}","pulls_url":"https://api.github.com/repos/desec-io/desec-stack/pulls{/number}","milestones_url":"https://api.github.com/repos/desec-io/desec-stack/milestones{/number}","notifications_url":"https://api.github.com/repos/desec-io/desec-stack/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/desec-io/desec-stack/labels{/name}","releases_url":"https://api.github.com/repos/desec-io/desec-stack/releases{/id}","deployments_url":"https://api.github.com/repos/desec-io/desec-stack/deployments","created_at":"2016-09-27T20:02:32Z","updated_at":"2018-02-13T18:34:15Z","pushed_at":"2018-03-14T12:54:15Z","git_url":"git://github.com/desec-io/desec-stack.git","ssh_url":"git@github.com:desec-io/desec-stack.git","clone_url":"https://github.com/desec-io/desec-stack.git","svn_url":"https://github.com/desec-io/desec-stack","homepage":"https://desec.io/","size":671,"stargazers_count":10,"watchers_count":10,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":2,"mirror_url":null,"archived":false,"open_issues_count":16,"license":{"key":"mit","name":"MIT License","spdx_id":"MIT","url":"https://api.github.com/licenses/mit"},"forks":2,"open_issues":16,"watchers":10,"default_branch":"master"}},"base":{"label":"desec-io:master","ref":"master","sha":"8006001002ac859a63b91c96f402cc1854e299ba","user":{"login":"desec-io","id":22482887,"avatar_url":"https://avatars3.githubusercontent.com/u/22482887?v=4","gravatar_id":"","url":"https://api.github.com/users/desec-io","html_url":"https://github.com/desec-io","followers_url":"https://api.github.com/users/desec-io/followers","following_url":"https://api.github.com/users/desec-io/following{/other_user}","gists_url":"https://api.github.com/users/desec-io/gists{/gist_id}","starred_url":"https://api.github.com/users/desec-io/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/desec-io/subscriptions","organizations_url":"https://api.github.com/users/desec-io/orgs","repos_url":"https://api.github.com/users/desec-io/repos","events_url":"https://api.github.com/users/desec-io/events{/privacy}","received_events_url":"https://api.github.com/users/desec-io/received_events","type":"Organization","site_admin":false},"repo":{"id":69393808,"name":"desec-stack","full_name":"desec-io/desec-stack","owner":{"login":"desec-io","id":22482887,"avatar_url":"https://avatars3.githubusercontent.com/u/22482887?v=4","gravatar_id":"","url":"https://api.github.com/users/desec-io","html_url":"https://github.com/desec-io","followers_url":"https://api.github.com/users/desec-io/followers","following_url":"https://api.github.com/users/desec-io/following{/other_user}","gists_url":"https://api.github.com/users/desec-io/gists{/gist_id}","starred_url":"https://api.github.com/users/desec-io/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/desec-io/subscriptions","organizations_url":"https://api.github.com/users/desec-io/orgs","repos_url":"https://api.github.com/users/desec-io/repos","events_url":"https://api.github.com/users/desec-io/events{/privacy}","received_events_url":"https://api.github.com/users/desec-io/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/desec-io/desec-stack","description":"Basic stack for deSEC name services, implemented as a docker-compose application","fork":false,"url":"https://api.github.com/repos/desec-io/desec-stack","forks_url":"https://api.github.com/repos/desec-io/desec-stack/forks","keys_url":"https://api.github.com/repos/desec-io/desec-stack/keys{/key_id}","collaborators_url":"https://api.github.com/repos/desec-io/desec-stack/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/desec-io/desec-stack/teams","hooks_url":"https://api.github.com/repos/desec-io/desec-stack/hooks","issue_events_url":"https://api.github.com/repos/desec-io/desec-stack/issues/events{/number}","events_url":"https://api.github.com/repos/desec-io/desec-stack/events","assignees_url":"https://api.github.com/repos/desec-io/desec-stack/assignees{/user}","branches_url":"https://api.github.com/repos/desec-io/desec-stack/branches{/branch}","tags_url":"https://api.github.com/repos/desec-io/desec-stack/tags","blobs_url":"https://api.github.com/repos/desec-io/desec-stack/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/desec-io/desec-stack/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/desec-io/desec-stack/git/refs{/sha}","trees_url":"https://api.github.com/repos/desec-io/desec-stack/git/trees{/sha}","statuses_url":"https://api.github.com/repos/desec-io/desec-stack/statuses/{sha}","languages_url":"https://api.github.com/repos/desec-io/desec-stack/languages","stargazers_url":"https://api.github.com/repos/desec-io/desec-stack/stargazers","contributors_url":"https://api.github.com/repos/desec-io/desec-stack/contributors","subscribers_url":"https://api.github.com/repos/desec-io/desec-stack/subscribers","subscription_url":"https://api.github.com/repos/desec-io/desec-stack/subscription","commits_url":"https://api.github.com/repos/desec-io/desec-stack/commits{/sha}","git_commits_url":"https://api.github.com/repos/desec-io/desec-stack/git/commits{/sha}","comments_url":"https://api.github.com/repos/desec-io/desec-stack/comments{/number}","issue_comment_url":"https://api.github.com/repos/desec-io/desec-stack/issues/comments{/number}","contents_url":"https://api.github.com/repos/desec-io/desec-stack/contents/{+path}","compare_url":"https://api.github.com/repos/desec-io/desec-stack/compare/{base}...{head}","merges_url":"https://api.github.com/repos/desec-io/desec-stack/merges","archive_url":"https://api.github.com/repos/desec-io/desec-stack/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/desec-io/desec-stack/downloads","issues_url":"https://api.github.com/repos/desec-io/desec-stack/issues{/number}","pulls_url":"https://api.github.com/repos/desec-io/desec-stack/pulls{/number}","milestones_url":"https://api.github.com/repos/desec-io/desec-stack/milestones{/number}","notifications_url":"https://api.github.com/repos/desec-io/desec-stack/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/desec-io/desec-stack/labels{/name}","releases_url":"https://api.github.com/repos/desec-io/desec-stack/releases{/id}","deployments_url":"https://api.github.com/repos/desec-io/desec-stack/deployments","created_at":"2016-09-27T20:02:32Z","updated_at":"2018-02-13T18:34:15Z","pushed_at":"2018-03-14T12:54:15Z","git_url":"git://github.com/desec-io/desec-stack.git","ssh_url":"git@github.com:desec-io/desec-stack.git","clone_url":"https://github.com/desec-io/desec-stack.git","svn_url":"https://github.com/desec-io/desec-stack","homepage":"https://desec.io/","size":671,"stargazers_count":10,"watchers_count":10,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":2,"mirror_url":null,"archived":false,"open_issues_count":16,"license":{"key":"mit","name":"MIT License","spdx_id":"MIT","url":"https://api.github.com/licenses/mit"},"forks":2,"open_issues":16,"watchers":10,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/desec-io/desec-stack/pulls/93"},"html":{"href":"https://github.com/desec-io/desec-stack/pull/93"},"issue":{"href":"https://api.github.com/repos/desec-io/desec-stack/issues/93"},"comments":{"href":"https://api.github.com/repos/desec-io/desec-stack/issues/93/comments"},"review_comments":{"href":"https://api.github.com/repos/desec-io/desec-stack/pulls/93/comments"},"review_comment":{"href":"https://api.github.com/repos/desec-io/desec-stack/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/desec-io/desec-stack/pulls/93/commits"},"statuses":{"href":"https://api.github.com/repos/desec-io/desec-stack/statuses/7bcae63779317a3d62fc2e20935b5b5e03f528f2"}},"author_association":"OWNER","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":1,"deletions":1,"changed_files":1}}
{"actor":{"display_login":"peterthomassen"}}