<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Sronan -
<div class=""><br class="">
</div>
<div class="">For avoidance of doubt (and to save folks some digging), I will observe that the number resources associated with the U.S. DoD handle I referenced do not include DoD’s legacy IPv4 number resource holdings. However, there are indeed are registration
agreements with the US DoD that pertain to the DoD’s legacy IPv4 number resource holdings, and this may be readily confirmed by reviewing the CBO assessment report for the “NATIONAL DEFENSE AUTHORIZATION ACT FOR FISCAL YEAR 2020” (which in its early form envisioned
potential monetization of select DoD IPv4 number resources) - </div>
<div class="">
<div class=""><br class="">
</div>
From the CBO assessment <<a href="https://www.govinfo.gov/content/pkg/CRPT-116hrpt120/html/CRPT-116hrpt120-pt2.htm" class="">https://www.govinfo.gov/content/pkg/CRPT-116hrpt120/html/CRPT-116hrpt120-pt2.htm</a>>
<div class=""><br class="">
</div>
<blockquote style="margin: 0 0 0 40px; border: none; padding: 0px;" class="">
<div class="">
<div class=""><i class="">To estimate the potential receipts from the sale of IP </i></div>
</div>
<div class="">
<div class=""><i class="">addresses, CBO examined the security risks and market factors </i></div>
</div>
<div class="">
<div class=""><i class="">that would affect the number of addresses and the price for </i></div>
</div>
<div class="">
<div class=""><i class="">those addresses that could be sold within the ten-year budget </i></div>
</div>
<div class="">
<div class=""><i class="">window. CBO expects that DoD would not be prepared to sell any </i></div>
</div>
<div class="">
<div class=""><i class="">addresses before 2022 for several reasons. First, over the next </i></div>
</div>
<div class="">
<div class=""><i class="">two years DoD plans to study the cybersecurity requirements and </i></div>
</div>
<div class="">
<div class=""><i class="">procedures that will support the department's transition of </i></div>
</div>
<div class="">
<div class=""><i class="">IPv4 addresses to the next generation of IPv6 addresses. </i></div>
</div>
<div class="">
<div class=""><i class="">Second, the agency would then have to update its internal </i></div>
</div>
<div class="">
<div class=""><i class="">network operations in order to mitigate the security risks of </i></div>
</div>
<div class="">
<div class=""><i class="">transferring DoD IP addresses to nonfederal entities.\5\
<b class="">Third, </b></i></div>
</div>
<div class="">
<div class=""><i class=""><b class="">DoD would have to amend its existing agreement with the </b></i></div>
</div>
<div class="">
<div class=""><i class=""><b class="">American Registry for Internet Numbers (ARIN), which requires </b></i></div>
</div>
<div class="">
<div class=""><i class=""><b class="">DoD to release unneeded IP addresses to ARIN for </b></i></div>
</div>
<div class="">
<div class=""><i class=""><b class="">redistribution.</b></i></div>
</div>
</blockquote>
<div class=""><br class="">
<div>ARIN has no particular view on the merits/issues of US DoD disposition of its rights to IPv4 blocks (and this provision was omitted from the NDAA in its final form), but we did indicate to the DoD that ARIN polices for IPv4 address blocks have indeed changed,
and that their agreement with ARIN does not preclude disposition of rights to IPv4 address blocks now that the ARIN community has established transfer policies allowing same. </div>
<div><br class="">
</div>
<div>(ARIN applies the community-developed policies to <u class="">all</u> number resources in the ARIN registry, and this includes blocks issued by predecessor operators of the registry.)</div>
<div><br class="">
</div>
<div>FYI,</div>
<div>/John</div>
<div><br class="">
</div>
<div>
<div>John Curran</div>
<div>President and CEO</div>
<div>American Registry for Internet Numbers</div>
<div><br class="">
</div>
</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">On 25 Apr 2021, at 9:13 AM, John Curran <<a href="mailto:jcurran@arin.net" class="">jcurran@arin.net</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Sronan -
<div class=""><br class="">
</div>
<blockquote style="margin: 0 0 0 40px; border: none; padding: 0px;" class="">
<div class="">I’d suggest asking rather than making assertions when it comes to ARIN, as this will avoid propagating existing misinformation in the community. </div>
<div class=""><br class="">
</div>
<div class="">Many US government agencies, including the US Department of Defense, have signed registration services agreements with ARIN.</div>
<div class=""><br class="">
</div>
<div class="">From <a href="https://account.arin.net/public/member-list" class="">https://account.arin.net/public/member-list</a> - </div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>
<div _ngcontent-bsn-c83="" class="memberName" style="caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 14px; box-sizing: border-box; width: 412.5px; display: inline-block; vertical-align: top;">
<span _ngcontent-bsn-c83="" class="ng-star-inserted" style="box-sizing: border-box;">United States Department of Defense (DoD)</span></div>
<span style="caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 14px;" class=""> </span>
<div _ngcontent-bsn-c83="" class="memberOrgHandle" style="caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 14px; box-sizing: border-box; padding-left: 0.5em; display: inline-block; vertical-align: top;">
<a _ngcontent-bsn-c83="" href="https://search.arin.net/rdap?query=USDDD&searchFilter=entity" style="box-sizing: border-box; color: rgb(0, 122, 153);" class="">USDDD</a></div>
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">
<div class="">Thanks! </div>
<div class="">/John</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">John Curran</div>
<div class="">President and CEO</div>
<div class="">American Registry for Internet Numbers</div>
</div>
<div class="">
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="">On 25 Apr 2021, at 8:54 AM, <a href="mailto:sronan@ronan-online.com" class="">
sronan@ronan-online.com</a> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Except these DoD blocks don’t fall under ARIM justification, as they predate ARIN. It is very likely that the DoD has never and will never sign any sort of ARIN agreement.<br class="">
<br class="">
Sent from my iPhone<br class="">
<br class="">
<blockquote type="cite" class="">On Apr 25, 2021, at 3:40 AM, Mel Beckman <<a href="mailto:mel@beckman.org" class="">mel@beckman.org</a>> wrote:<br class="">
<br class="">
Mark,<br class="">
<br class="">
ARIN rules require every IP space holder to publish accurate — and effective — Admin, Tech, and Abuse POCs. The DOD hasn’t done this, as I pointed out, and as you can test for yourself. Your expectation that the DOD will “generally comply with all of the expected
norms” is sorely naive, and already disproven.<br class="">
<br class="">
As far as “why does anyone on the Internet need to publish to your arbitrary standards”, you seem to forget that in the U.S., the government is accountable to the People. Where a private company may not have to explain its purposes, the government most certainly
does in the private sector. With these IP spaces being thrust into the civilian realm, yes, they owe the citizenry an explanation of their actions, just as they would if they had started mounting missile launchers on highway overpasses. It’s a direct militarization
of a civilian utility. <br class="">
<br class="">
Keep in mind that the U.S. Government — under all administrations — has shown that it will abuse every technical advantage it can, as long as it can do so in secret. Perhaps you’ve forgotten James Clapper, the former director of national intelligence, who falsely
testified to Congress that the government does “not wittingly” collect the telephone records of millions of Americans. And he was just the tip of the iceberg. Before Clapper under Obama there was the Bush administration’s Stellar Wind" warrantless surveillance
program. The list of government abuse of civilian resources is colossal . <br class="">
<br class="">
Fighting against that isn’t political. It’s patriotic.<br class="">
<br class="">
-mel <br class="">
<br class="">
<blockquote type="cite" class="">On Apr 25, 2021, at 12:02 AM, Mark Foster <<a href="mailto:blakjak@blakjak.net" class="">blakjak@blakjak.net</a>> wrote:<br class="">
<br class="">
<br class="">
<blockquote type="cite" class="">
<blockquote type="cite" class="">On 25/04/2021 3:24 am, Mel Beckman wrote:<br class="">
</blockquote>
This doesn’t sound good, no matter how you slice it. The lack of transparency with a civilian resource is troubling at a minimum. I’m going to bogon this space as a defensive measure, until its real — and detailed — purpose can be known. The secret places of
our government have proven themselves untrustworthy in the protection of citizens’ data and networks. They tend to think they know “what’s good for” us.<br class="">
<br class="">
-mel<br class="">
<br class="">
</blockquote>
<br class="">
Why does anyone on the Internet need to publish to your arbitrary standards, what they intend to do with their IP address ranges?<br class="">
<br class="">
Failure to advertise the IP address space to the Internet (until now, perhaps) doesn't make the address space any less legitimate, and though I'd expect the DoD to generally comply with all of the expected norms around BGP arrangements and published whois details,
at the end of the day, they can nominate who should originate it from their AS and as long as we can see who owns it.... it's just not our business.<br class="">
<br class="">
Any organisation who's used DoD space in a way that's likely to conflict with, well, the DoD, gambled and lost.<br class="">
<br class="">
Mark.<br class="">
<br class="">
</blockquote>
</blockquote>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</div>
</body>
</html>