Activity Report 2019 Facts | Data | Figures 2 3 2019 In Retrospect 4 Market & Business Development 14 .de Report 26 2020 Prospects 40 3-in-1: Added Value to Domains and .de: Rallying DUMs in a Maturing Market User Desire for Digital Self-Determination – Ethical Data Handling through ID4me A Market Opportunity for DENIC ID Level of Digitisation and Internet Use in Germany Changes in the Supervisory and the Executive Board DENIC ― the Networkers 28 Registry Lock: Protection Against A "Hostile Takeover" Enhancing DDos Resilience Through a Broader Competitors in the Social Media Segment DENIC in Coordination and Standardisation Organisations Recognizing Patterns, Drawing Conclusions: and More Diversified Name Server Landscape Improved Risk Assessment and Business Competitors in the gTLD Segment Cooperation with State Institutions Forecasting Through Data Warehousing Data Center Architecture Put to the Test: Hybrid On-Premises Private and Public Cloud The Niche Sector of ENUM Cooperation with Academic Institutions and Diversification 2.0: Continuous Optimisation Operation Envisaged as Future Solution Security Experts of Name Service Operation and Security Contenta Solidary Contribution to Enhanced Internet Security: Cross-Registry Security Initiative Scored at CENTR Awards DENIC in Associations Data Center in the 21st Century: DNS Infrastructure Services Roll-out of New Architectures DENIC Events Contents DNSmeter Tool: Know-How Transfer to The Technical Community to Increase Resilience on the Internet Multiplied Customer Numbers, New Major Clients: Providing Expert Advice to Digital Policymakers Sponsoring Partnerships Data Escrow Services in Germany and in Europe Near-Real-Time Zone Rollout: The Window Between Domain Registration and Accessibility Decreases Considerably Status Information About Key DENIC Services Source List Anytime Available Online DENIC data (DENIC eG, DENIC Services GmbH & Co. KG) ICANN New gTLD Stats CENTRstats Initiative D21: D21 Digital-Index 2019/2020 DESTATIS (German Federal Statistical Office) nTldStats Eurostat Verisign Domain Name Industry Brief 5 Continuous optimisation of infrastructure and pro­­ an ID authority. The related tasks include registering user cesses – developing innovative services – providing IDs, authenticating users to access online services (login technological and Internet policy momentum – partners), and managing user consent for sharing their substantial promotion of the open, free and secure personal information with the individual login partners. Internet – and, last but not least, enhancing the rele- DENIC member companies can get involved in this vance of .de domains on a sustainable basis: Also in federated model as identity agents. In this role, they offer 2019, DENIC‘s project portfolio consistently reflected users to acquire and set up an ID account for them, store In Retrospect the Cooperative’s strategic goals. their personal data and share data with the login partners as consented by the user. A first partnership agreement 3-in-1: Added Value to Domains and Ethical Data on the use of the DENIC ID service was signed with 1&1 Handling through ID4me IONOS, prior to the official market launch. In March, DENIC presented a first market-ready Within the scope of a developer hackathon organised implementation of its new DENIC ID service by DENIC and the ID4me co-initiators at the CloudFest, (⌂ denic.de/en/my-digital-id/) at the largest global numerous plugins ready for integration by and web event of the cloud and hosting industry, CloudFest. frame works for login partners – such online providers that Part of a single sign-on solution for digital identity accept ID logins for users to identify for access – were management on the Internet, DENIC ID is built on the developed. They have been available since then for con- open and federated ID4me standard. The domain- tent management systems like Joomla, Typo3, WordPress based alternative to social media logins is attractive to or Plone and as code in applications like Go, Java, Python businesses, private Internet users, and the public sector or .NET. The participants of the hackathon were able to alike: Next to convenience aspects, data privacy and draw on the Open Code Libraries co-developed by DENIC. security have top priority. These are designed especially for hosting, cloud and SaaS providers to facilitate integration of an ID4me login into 2019 In the federated system, which relies on the principle of their respective IT setups and thus enable seamless on- In Retrospect distributed responsibilities, DENIC assumes the role of boarding and central authentication of customers. 6 7 In June, DENIC conducted a developer workshop designed Two members of the Supervisory Board were replaced. While in the previous years DENIC focussed on up sizing possible flexibility in the future, as they can be operated particularly for ID agents who offer their customers the For the tenure ending in 2022, it is composed as the existing geographic locations by increasing band- on any target platform. They combine a facilitated rollout establishment of an ID account and intend to market the follows: widths and response capacities and applying more and and operation of NSLs and the option to expand the new added value for a domain this way. Next to implemen- • Thomas Keller – 1&1 IONOS SE (chairman) more automated orchestration tools, top priority is now footprint flexibly in case of changing query volumes with ting an agent identity management client, integrations were • Dr. Johannes Loxen – SerNet Service Network GmbH on lateral variability and diversification of locations. improved reactivity in case of an incident and optimal created for three programming languages (Perl, Ruby and (vice chairman) cost efficiency through tailored solutions. PHP) and made accessible via an open GitLab repository. • Oliver Elste – Smart-NIC GmbH (secretary) Instead of continuing to topologically rely on a limited • Dennis Nizard – HEXONET GmbH amount of one-size-fits-all locations, DENIC will use a pool Data Center Architecture Put to the Test: In October, ten national domain registries in Europe joined • Daniel Rink – Profihost AG with multiple NSLs of different performance classes in the Hybrid On-Premises Private and Public Cloud the ID4me initiative as supporters at the second ID4me future, whose capacities, connectivity and availability will Operation Envisaged as Future Solution Summit. The organisations, which in total have more than There also was a change among the honorary members be tailored to the respective traffic volume. 40 million domains under management, came together at of the Executive Board. For the next three years, the Considerations aiming at medium-term reduction of capi- an ID Authority Workshop to discuss and exchange infor- General Assembly elected Scalable infrastructures that allow data traffic to be tal expenditure and operating costs in the network, com- mation about business potentials and technical possibilities • Martin Küchenthal – LEMARIT GmbH (re-)routed to or pooled within a variable number of pute and storage areas of its IT infrastructures have been for implementation. The participants were highly interested • Sebastian Röthler – info.at Internet GmbH instances ― right up to ISP networks ― will enable more a reason for DENIC since the end of 2018 to reassess and in a white label solution each registry can adapt to its own efficient mitigation even of larger and more complex revise the existing concept of its data center operations system thanks to existing open source toolkits without Enhancing DDos Resilience Through a Broader and traffic data streams, if nec essary. from scratch. As part of this review, registry and office major initial investments and implementation work being More Diversified Name Server Landscape services as well as standard DNS applications shall be required. The attending registries further agreed to draft a The long-term goal is full redundancy at minimal latency, identified that would be suited for cloud-based operation. common policy framework for ID authorities and ID agents. One of the cornerstones of DENIC‘s activities has always thus eliminating fate sharing in case of potential attack been the optimisation of the operation and security of and further improving the DDoS resilience of systems and Decisive for a final assessment shall be, on the one hand, Changes in the Supervisory and the Executive Board its name service. The service operated for the .de TLD customer zones involved. whether scaling advantages can be achieved by migrat- and DENIC‘s Anycast customers is provided at a range of ing entire services or parts thereof into a cloud environ- At the General Assembly on 11 April, regular elections for name server locations (NSL), which ― depending on the In the course of the year, a first virtual NSL (vNSL) proto- ment, thus reducing costs through the elimination of own the members of the statutory bodies of the Cooperative customer’s ordered capacities ― are grouped into one or type was developed and implemented as an operational machine instances, also because the constant provision of were held. more service addresses. container in an external cloud. vNSLs will enable highest security, administration and maintenance resources would 8 9 become dispensable, while keeping the same or achiev ing be operated on-premise, however with increased effi- Domains under Management as of 31 Dec. an even higher level of performance, reliability and informa- ciency through greater network automation.