title: Aztec Camera

text: Frame explained in August 2014 that he contemplated the conception of "Love" during a three-year hiatus following the release of "Knife". Frame said that he moved even further away from the British "indie ethic" and was listening to the "pop end of hip hop", including artists such as Jimmy Jam & Terry Lewis, Cherrelle, the Force MDs and Alexander O'Neal. Frame wanted to make a record based on such influences and "Working in a Goldmine" was the first song to achieve this aspiration.


title: Aztec Camera

text: Frame relocated to the US to record the album—"pretty much against the wishes of Warner Brothers", who were unsure of his decision-making at the time—and was primarily based in Boston, Massachusetts, and New York. Frame recorded with American session musicians, like Marcus Miller and David Franke, and explained that his audience was "mystified" by the transformation of the band, but he was "too far gone" to care and just wanted to do his "own thing" by that stage. Due to the significant change of musical direction, the album's first three singles did not make a strong impression in the marketplace.


title: Aztec Camera

text: The "Love" album produced the popular song "Somewhere in My Heart", recorded by Frame with dance, R&B and pop producer Michael Jonzun in Boston. Frame said in 2014 that the song has been "great" for him, but at the time of creating the album, the song was not "in keeping" with the rest of "Love". Frame revealed in a radio interview with the "Soho Social" program, presented by Dan Gray, that he considered "Somewhere in My Heart" an odd song and initially thought it would be best as a B-side. Frame concluded, "I can't pick them [the successful songs]."


title: Aztec Camera

text: Frame was asked during a television interview, following the release of "Love", about the new sound of the album, and he referenced artists like Anita Baker and Luther Vandross. When asked if the album could be labelled "Middle of the road (MOR)", Frame replied: "Call it what you like. I don't really mind."


title: Aztec Camera

text: For the band's fourth album, "Stray", Frame collaborated with the Clash's Mick Jones on the song "Good Morning Britain", and Jones also toured with the band following the album's release. Jones performed with Aztec Camera at the Glasgow Barrowlands and the Ibiza Festival in 1990.


title: Aztec Camera

text: In a 1990 interview, recorded during a tour of Japan, Frame explained that he wrote "Good Morning Britain" in 45 minutes after a two- to three-hour conversation with Jones in the canteen of a London rehearsal studio that both Big Audio Dynamite and Aztec Camera were using. In an August 2014 radio interview, Frame elaborated further, stating that at the time he wrote the song, Jones lived near his London home; Frame visited Jones after recording the song and said to the Clash guitarist, "You'll either sing on it, or you'll want to sue me", as Frame believed the song was so similar to Jones' previous work.


title: Aztec Camera

text: Frame then recorded the next Aztec Camera album, "Dreamland", with Japanese composer Ryuichi Sakamoto. Released in 1993, the album was mixed by Julian Mendelsohn, who had previously worked with the band. While mixing the album at Hook End Manor, an 18th-century red-brick building that had been converted into a studio in the Berkshire countryside of England, UK, Frame explained that he waited for a lengthy period of time to work with Sakamoto, due to the latter's busy schedule. Frame finally met with Sakamoto in Ibiza and both eventually recorded the album in New York City, US over a four-week period. Frame's interest in Sakamoto was elaborated upon in the same interview:


title: Aztec Camera

text: I liked what he did when he was in the Yellow Magic Orchestra, and I also liked that album where he plays the music from Merry Christmas Mr Lawrence on piano. That's where you realise that the atmosphere around his compositions is actually in the writing – it's got nothing to do with synthesisers.


title: Aztec Camera

text: Frame's decision to ask Sakamoto was finalised after he saw his performance at the Japan Festival that was held in London, UK. During the recording process, Frame's routine consisted of: working in the studio from the early afternoon until around 2am; a turkey sandwich at a deli off Times Square ("because it was possible to get one at two in the morning, and for no other reason"); a cab-ride back to the Mayflower Hotel, where he was staying; an hour of listening to Shabba Ranks; and then bed.


title: Aztec Camera

text: For Frame's final album under the Aztec Camera moniker, and the last original studio recording for the WEA label, Frame worked with renowned production team Langer-Winstanley, who had previously worked with Madness and Elvis Costello. "Frestonia" was released in 1995 and the Reprise Records label issued it in the US. "Sun" (1996) was the only one song from the album that was released as a single. After the release of "Frestonia", Frame finally decided to record under his own name and was no longer a Warner artist.


title: Aztec Camera

text: Three Aztec Camera "Best of" compilations were eventually released: "The Best of Aztec Camera" was released in 1999 by Warner.ESP, a division of the Warner corporation that specialised in compilations; in 2005, "Deep and Wide and Tall" was released by the Warner Strategic Marketing United Kingdom label as part of the Warner Platinum series; and "Walk Out To Winter: The Best of Aztec Camera", a two-disc collection that was released by the Music Club Deluxe label in 2011.


title: Aztec Camera

text: Since the Stray Tour in 1990, Frame has merged a segment of the Bob Dylan song "It's Alright Ma (I'm Only Bleeding)" into "Down The Dip", from "High Land, Hard Rain", and this version of the song was played by Frame at subsequent shows, up until October 2012. Around 2012, Frame included a segment of the Curtis Mayfield song "People Get Ready" in live solo versions of the song "How Men Are", from the "Love" album. In October 2013, a book entitled "The Lyrics: Roddy Frame"—containing the entirety of Frame's lyrical work with Aztec Camera—and a "High Land, Hard Rain" T-shirt were released as part of a "Roddy Frame" collection.


title: Aztec Camera

text: All six Aztec Camera studio albums were reissued in August 2012 by the Edsel Records label, which had previously completed the same process for the studio albums of Everything But The Girl. The reissued editions included bonus tracks and live recordings. In a 1 August 2012 post on his Twitter profile, Frame explained that he was not involved with the Edsel Records reissue and was negotiating with a "supercool US label about releasing the definitive set (w/ rarities, home demos etc.)" in 2013. Domino Recording Company is the label that Frame referred to, but only "High Land, Hard Rain" was reissued, rather than the entire Aztec Camera catalog.


title: Aztec Camera

text: In August 2013, the Domino reissue of "High Land, Hard Rain" was released in Europe to commemorate the album's 30th anniversary. The reissue was remastered from the original analogue tapes and was physically produced only as a vinyl pressing, but was sold with a digital download of the album.


title: Aztec Camera

text: Domino released an expanded second version of the 30th anniversary reissue of "High Land, Hard Rain" in 2014 for North America that consisted of two compact discs, 16 additional rarities and liner notes from American music journalist David Fricke (a vinyl version was also released and was sold with a digital download card that provided the additional songs). To accompany the North American version, AED (Analogue Enhanced Digital) Records—a label cofounded by Collins and James Endeacott, the latter a former employee of Rough Trade—also offered a 7" EP to the first 400 buyers.


title: Aztec Camera

text: Following the August 2013 reissue of "High Land, Hard Rain", Frame announced three corresponding live performances, at which the album was played in its entirety with a full band. The December 2013 shows occurred in London, Manchester and Glasgow, UK. To replicate the original recording process, Frame used the different guitars than he used for each song in the anniversary shows.


title: Aztec Camera

text: Original Aztec Camera bassist Campbell Owens attended the Glasgow performance as an audience member—Frame later explained on the Clyde 2 radio station that Owens thanked him backstage after the show and the gesture made the experience worthwhile. At the Glasgow show, Frame and his band also played songs, such as "Green Jacket Grey", that were recorded for "High Land, Hard Rain", but did not appear on the final track listing.


title: Aztec Camera

text: When asked in April 2014 about reconnecting with a record that he wrote as a teenager while around the age of 50 years, Frame replied:


title: Aztec Camera

text: The songs that you write when you're young are just a part of you—they stay with you. The interesting thing was how far I kind of strayed from the original versions over the years—I mean acoustically and everything. So, coming back and stripping them down and trying to revisit them in a kind of honest, genuine fashion was actually—even for an old cynic like me—it turned to be a very moving thing ... It [30th anniversary tour] was a very moving experience. It was like we were all revisiting our teenage years together, and it was nostalgic, but in a nice, happy, positive way.


title: Aztec Camera

text: Frame explained in May 2014 that the tour was arranged after he had reconnected with his former Aztec Camera manager, Johnson, who received a call from a prominent UK promoter who asked Frame if he was interested in the concept—Frame agreed to the tour at the time he was first asked.


title: Aztec Camera

text: On 21 January 1985, alongside Orange Juice, The Woodentops and Everything But The Girl, Aztec Camera raised an estimated £18,000 for the striking miners of the National Union of Mineworkers (NUM) through a fundraising event at the Brixton Academy—the year-long strike concluded six weeks later.


title: Aztec Camera

text: Following the release of the "Love" album, the band was invited to perform at a benefit concert for the Campaign for Nuclear Disarmament (CND) organisation in the late 1980s. Frame explained in a television interview prior to the concert that he was merely the entertainment and would not deliver any speeches.


title: Aztec Camera

text: In 1990, Aztec Camera contributed the song "Do I Love You?" to the Cole Porter tribute album "Red Hot + Blue" that was produced by the Red Hot Organization. The proceeds from the album benefited HIV/AIDS research.


title: Aztec Camera

text: The band's album "Love" was among the nominations for "Best British Album" at the 1989 BRIT Awards. "Somewhere in My Heart", the second single from "Love", was the band's biggest hit, reaching No. 3 on the UK Singles Chart. Following the release of the "Stray" album, "Good Morning Britain" was considered to be a comeback for Frame, as the preceding single "The Crying Scene" had only reached No. 70 in the UK.


title: Aztec Camera

text: Frame changed the band's line-up numerous times over the course of its existence and, in a 1988 interview, Frame explained that the changes were underpinned by a desire to continually improve the quality of their music; however, he differentiated this desire from "blind ambition", whereby popular success is constantly sought after. Early members included Owens (bass) and Mulholland (drums). Gannon was a member from 1983 to 1984 before joining The Smiths, while guitarist Malcolm Ross (formerly of Josef K and Orange Juice) joined the band in 1984 and played on the "Knife" album.


title: Freddie Bartholomew

text: Frederick Cecil Bartholomew (March 28, 1924 – January 23, 1992), known for his acting work as Freddie Bartholomew, was an English-American child actor. One of the most famous child actors of all time, he became very popular in 1930s Hollywood films. His most famous starring roles are in "Captains Courageous" (1937) and "Little Lord Fauntleroy" (1936).


title: Freddie Bartholomew

text: He was born in London, and for the title role of MGM's "David Copperfield" (1935), he emigrated to the United States at the age of 10 in 1934, living there the rest of his life. He became an American citizen in 1943 following World War II military service.


title: Freddie Bartholomew

text: Despite his great success and acclaim following "David Copperfield", his childhood film stardom was marred by nearly constant legal battles and payouts, which eventually took a huge toll on both his finances and his career. In adulthood, after World War II service, his film career dwindled rapidly, and he switched from performing to directing and producing in the medium of television.


title: Freddie Bartholomew

text: Bartholomew was born Frederick Cecil Bartholomew in March 1924 in Harlesden in the borough of Willesden, Middlesex, London. His parents were Cecil Llewellyn Bartholomew, a wounded World War I veteran who became a minor civil servant after the war, and Lilian May Clarke Bartholomew. By the age of three, Freddie was living in Warminster, a town in Wiltshire in southwest England, in his paternal grandparents' home. He lived under the care of his aunt "Cissie", Millicent Mary Bartholomew, who raised him and became his surrogate mother. Bartholomew was educated at Lord Weymouth's Grammar School in Warminster, and by his Aunt Cissie.


title: Freddie Bartholomew

text: In Warminster, Bartholomew was a precocious actor and was reciting and performing from age three. By age five he was a popular Warminster celebrity, the "boy wonder elocutionist", reciting poems, prose, and selections from various plays, including Shakespeare. He sang and danced as well. His first film role came by the age of six, in 1930.


title: Freddie Bartholomew

text: He also pursued acting studies at the Italia Conti Academy of Theatre Arts in London, and appeared in a total of four minor British films. American filmmakers George Cukor and David O. Selznick saw him on a 1934 scouting trip to London and chose him for the young title role in their MGM film "David Copperfield" (1935). Bartholomew and his aunt emigrated to the United States in August 1934, and MGM gave him a seven-year contract.


title: Freddie Bartholomew

text: "David Copperfield", which also featured Basil Rathbone, Maureen O'Sullivan, W. C. Fields, and Lionel Barrymore, was a success, and made Bartholomew an overnight star. He was subsequently cast in a succession of film productions with some of the most popular stars of the day. Among his successes of the 1930s were "Anna Karenina" (1935) with Greta Garbo and Fredric March; "Professional Soldier" (1935) with Victor McLaglen and Gloria Stuart; "Little Lord Fauntleroy" (1936) with Dolores Costello and C. Aubrey Smith; "Lloyd's of London" (1937) with Madeleine Carroll and Tyrone Power; "The Devil is a Sissy" (1936) with Mickey Rooney and Jackie Cooper; and "Captains Courageous" (1937) with Spencer Tracy.


title: Freddie Bartholomew

text: "Captains Courageous" was the movie he most enjoyed working on. The film took an entire year to make, and much of it was shot off the coasts of Florida and Catalina Island, California. He later recalled, "For a kid, it was like one long outing. Spencer Tracy, Lionel Barrymore, Mickey Rooney, Melvyn Douglas and I – we all grew very close toward one another in those 12 months. When the shooting was finished, we cried like a bunch of babies as we said our goodbyes."


title: Freddie Bartholomew

text: His acting skills, open and personable presence, emotional range, refined English diction, and angelic looks made him a box-office favorite. He quickly became the second-highest-paid child movie star after Shirley Temple. Ring Lardner Jr. had high praise for him, saying of his performance as the star of "Little Lord Fauntleroy", "He is on the screen almost constantly, and his performance is a valid characterization, which is almost unique in a child actor, and, indeed, in three fourths of adult motion-picture stars." Of his role as the protagonist of "Captains Courageous", Frank Nugent of the "New York Times" wrote, "Young Master Bartholomew ... plays Harvey faultlessly."


title: Freddie Bartholomew

text: By April 1936, following the very popular "Little Lord Fauntleroy", Bartholomew's success and level of fame caused his long-estranged birth parents to attempt to gain custody of him and his fortune. A legal battle of nearly seven years ensued, resulting in nearly all the wealth that Bartholomew amassed being spent on attorneys' and court fees, and payouts to his birth parents and two sisters.


title: Freddie Bartholomew

text: The extreme financial drain of his birth parents' ongoing custody battles prompted Bartholomew's aunt to demand a raise in his salary from MGM in July 1937, leveraged by the huge success of "Captains Courageous". She threatened to break his MGM contract in order to find a better-paying studio. The contract battle kept him out of work for a year, causing among other things the postponement and eventual loss of his planned lead in a film of Rudyard Kipling's "Kim", and the loss of his planned lead in "Thoroughbreds Don't Cry" with Judy Garland and Mickey Rooney.


title: Freddie Bartholomew

text: He eventually resumed acting through 1942, in mostly lesser-quality films and roles, only three out of 11 of which were with MGM, and after 1938 he was less popular than in his heyday. This fall in popularity stemmed not only from the quality of the roles and his conflicts with MGM, but also from the fact that by late 1938 he was a tall, nearly 6-foot teenager, and the fact that the world was focusing on the growing problems of World War II and therefore the literary classics and costume dramas Bartholomew excelled at were less in fashion.


title: Freddie Bartholomew

text: In 1938, Twentieth Century Fox hired him for the lead in their film of Robert Louis Stevenson's "Kidnapped". MGM then re-teamed him for the fourth and fifth times with Mickey Rooney in "Lord Jeff" (1938) and "A Yank at Eton" (1942), and he co-starred with Judy Garland in the lightweight MGM musical "Listen, Darling" in 1938.


title: Freddie Bartholomew

text: In 1939 Universal re-teamed him for the third and fourth times with Jackie Cooper in "The Spirit of Culver" and "Two Bright Boys". For RKO distribution, he performed in "Swiss Family Robinson" and "Tom Brown's School Days" in 1940. And as World War II deepened, Columbia had him star in three military-related films: "Naval Academy" (1941), "Cadets on Parade" (1942), and "Junior Army" (1942).


title: Freddie Bartholomew

text: World War II military service interrupted Bartholomew's career even further. He enlisted in the U.S. Army Air Forces on January 13, 1943, at the age of 18, and worked in aircraft maintenance. During training he fell and injured his back, was hospitalized for seven months, and was discharged on January 12, 1944.


title: Freddie Bartholomew

text: He had one film role in 1944, in the low-budget comedy "The Town Went Wild". The film reunited him with Jimmy Lydon, with whom he had starred in "Tom Brown's School Days", "Naval Academy", and "Cadets on Parade". This ended up being Bartholomew's penultimate film performance, and his last for seven years. His efforts to revive his film career were unsuccessful; and efforts performing in regional theaters and vaudeville did not spark a comeback either.


title: Freddie Bartholomew

text: After distressing experiences including a devastating auto accident and performing unsuccessfully in a play in Los Angeles, in 1946 Bartholomew married publicist Maely Daniele. Daniele, six years his senior, was a twice-divorced woman, and his marriage to her caused a serious and permanent rift with his aunt, who moved back to England. The marriage was not a happy one.


title: Freddie Bartholomew

text: In 1946 he was in a radio play in an episode of "Inner Sanctum Mystery". In 1947, he appeared as himself in a five-minute cameo in the otherwise all-black musical film "Sepia Cinderella", relating his post-war efforts to have a successful vaudeville routine and telling a few gags onscreen. He spent most of 1948 touring small American theaters, and in November 1948 left without his wife for an Australian tour as a night-club singing, patter, and piano act.


title: Freddie Bartholomew

text: Upon his return to the United States in 1949, and in rather desperate circumstances, he switched to the new and burgeoning medium of television. He shifted from performer to television host and director to television producer and executive. Preferring to be known as Fred C. Bartholomew, he became the television director of independent television station WPIX in New York City from 1949 through 1954. His final acting role was as a priest in the 1951 film "St. Benny the Dip".


title: Freddie Bartholomew

text: He divorced his first wife in 1953, and in December of that year he married television chef and author Aileen Paul, whom he had met at WPIX. With her he had a daughter, Kathleen Millicent Bartholomew, born in March 1956, and a son, Frederick R. Bartholomew, born in 1958. The family, including stepdaughter Celia Ann Paul, lived in Leonia, New Jersey.


title: Freddie Bartholomew

text: This was an era in which advertising firms created and produced radio and television shows. In 1954, Bartholomew began working for Benton & Bowles, a New York advertising agency, as a television producer and director. At Benton & Bowles, he produced shows such as "The Andy Griffith Show", and produced or directed several television soap operas including "As the World Turns", "The Edge of Night" and "Search for Tomorrow". In 1964 he was made a vice president of radio and television at the company.


title: Freddie Bartholomew

text: Bartholomew and his second wife divorced by early 1977. He eventually remarried, and remained married to his third wife, Elizabeth, for the rest of his life.


title: Freddie Bartholomew

text: Suffering from emphysema, he retired from television by the late 1980s. He eventually moved with his family to Bradenton, Florida. In 1991 he was filmed in several interview segments for the documentary film "MGM: When the Lion Roars" (1992). He died of heart failure in Sarasota, Florida in January 1992, at the age of 67.


title: Freddie Bartholomew

text: The seven-minute Warner Bros. cartoon "The Major Lied 'Til Dawn" (1938) includes a caricature of Bartholomew as his Little Lord Fauntleroy role.


title: Freddie Bartholomew

text: He was also caricatured, along with many other Hollywood celebrities, in the eight-minute 1938 Disney cartoon "Mother Goose Goes Hollywood" – in this case as his character from the film "Captains Courageous". As in the film, Freddie falls into the sea and is saved by Spencer Tracy's character.


title: Freddie Bartholomew

text: A non-alcoholic cocktail – a parallel of the Shirley Temple – which combines ginger ale with lime juice, known as a "Freddie Bartholomew cocktail", is named for him.


title: Freddie Bartholomew

text: Although his name isn't mentioned, he is referred to in J. D. Salinger's "The Catcher in the Rye", as a figure whom Holden Caulfield looks like – specifically, Bartholomew's most iconic role as Harvey Cheyne in "Captains Courageous" (1937), referred to by the character Sunny as the kid in the movie "who falls off [a] boat".


title: 2018 Amesbury poisonings

text: On 30 June 2018, in Amesbury, two British nationals, Charlie Rowley and Dawn Sturgess, were admitted to Salisbury District Hospital in Wiltshire, England. Police determined that they were poisoned by a Novichok nerve agent of the same kind used in the poisoning of Sergei and Yulia Skripal in Salisbury, away, almost four months prior. Sturgess died on 8 July, and Rowley regained consciousness two days later.


title: 2018 Amesbury poisonings

text: According to the subsequent press report released by the Metropolitan Police, at 10:15 on Saturday 30 June 2018, the South Western Ambulance Service was called to a residential address in Amesbury after Dawn Sturgess had collapsed. She was subsequently taken to hospital and admitted. At 15:30, the ambulance service was again called to that address, after Charlie Rowley had fallen ill. He was taken to hospital, and Wiltshire Police were informed of both admissions.


title: 2018 Amesbury poisonings

text: On 8 July, Sturgess died at Salisbury District Hospital after doctors took the decision to switch off her life support. On 10 July, Rowley regained consciousness and there was a "small but significant improvement to his condition" according to the hospital. On 11 July, he was no longer in critical condition and the hospital downgraded his condition to "serious but stable". The same day, officers from the investigation team spoke with Rowley. He told his brother Matthew the nerve agent had been in a small perfume or aftershave bottle, which they had found in a park about nine days before spraying themselves with it. The police later closed and fingertip-searched Queen Elizabeth Gardens, a riverside park in central Salisbury, which the couple had visited the day before they fell ill. The funeral of Sturgess took place at Salisbury crematorium on 30 July 2018.


title: 2018 Amesbury poisonings

text: On 20 July, Rowley was discharged from the hospital. Over the weekend of 18/19 August 2018, he was re-admitted to hospital with sight problems. On 4 September 2018 he was reported to be ill with meningitis but was expected to leave hospital "within a month".


title: 2018 Amesbury poisonings

text: The incident was investigated by the Specialist Operations Directorate of the Metropolitan Police, assisted nationally by the National Counter Terrorism Policing Network and locally by Wiltshire Police, in a multi-agency response named Operation Fortis. According to the Metropolitan Police, there was nothing in either of the victims' backgrounds to suggest that they were deliberately targeted, and there were no other reports of people presenting with similar symptoms. The couple were believed to have been near the roads that were sealed off during the investigation of the Skripal poisoning in Salisbury.


title: 2018 Amesbury poisonings

text: During initial assessment, medical staff believed that the patients' illness was caused by the use of contaminated illegal drugs. But on 2 July, hospital staff had concerns over the symptoms the couple were displaying, and sent samples from both patients to the Government's Defence Science and Technology Laboratory (DSTL) at Porton Down for analysis. On 4 July the laboratory confirmed that the patients had been exposed to the Novichok nerve agent.


title: 2018 Amesbury poisonings

text: According to BBC News, the "most likely hypothesis" was that the Novichok was left over from the attack on the Skripals, and that the contaminated item which poisoned the couple "could be a vial or syringe because of the couple's lifestyle", as it was believed the Novichok was disposed of "in a haphazard way". Friends of the couple told "The Guardian" that Rowley frequently scavenged recycling bins for objects that he could sell, and that the couple's houses contained "loads of household things" they had picked up.


title: 2018 Amesbury poisonings

text: Sites in both Amesbury and Salisbury which were believed to have been visited by the couple were cordoned off. These included the local Boots Pharmacy, the Baptist Centre, and Muggleton Road in Amesbury, and Queen Elizabeth Gardens in Salisbury. Local residents were warned of an increased police presence, including officers wearing protective equipment.


title: 2018 Amesbury poisonings

text: On 6 July, police announced that officers had identified and spoken to several key witnesses and were reviewing more than 1,300 hours of CCTV footage which has been collected so far.


title: 2018 Amesbury poisonings

text: On 13 July a police cordon closed the north end of Rollestone Street, Salisbury to enable members of the Counter Terrorism Policing Network to search John Baker House, a hostel for the homeless where Dawn Sturgess lived. On 24 July the cordon was lifted and the police announced that no contamination was found in the hostel.


title: 2018 Amesbury poisonings

text: The Metropolitan Police announced on 13 July 2018 that they had identified the source of the nerve agent that poisoned Sturgess and Rowley as being a "small bottle" discovered at Rowley's house in Amesbury, which was confirmed by analysis at DSTL Porton Down to contain Novichok. Matthew Rowley, brother of the victim, said Charlie told him that he had picked up "the perfume bottle". The Metropolitan Police refused to confirm this claim.


title: 2018 Amesbury poisonings

text: Also on 13 July, the intergovernmental Organisation for the Prohibition of Chemical Weapons (OPCW) received a request from the UK for technical assistance on the incident in Amesbury. The OPCW sent a team of specialists who collected samples and sent them to two laboratories. By 18 July, preliminary work was completed and the team left the UK.


title: 2018 Amesbury poisonings

text: On 7 August 2018, the Foreign Office announced that OPCW experts would return to Amesbury to collect further samples. A spokesman said: "During their visit, the OPCW's experts will collect more samples to inform their work following their visit in July. The samples will be analysed at highly reputable international laboratories designated by the OPCW." The poison was confirmed on 4 September by the OPCW to be the same kind of nerve agent as that used on the Skripals, but the OPCW also said that it could not determine if it was from the same batch.


title: 2018 Amesbury poisonings

text: On 5 September 2018, Assistant Commissioner Neil Basu said the police had "no doubt" that this incident was connected to the poisoning of Sergei and Yulia Skripal. He said, "we do not believe Dawn and Charlie were deliberately targeted, but became victims as a result of the recklessness in which such a toxic nerve agent was disposed of." On the same date, the Metropolitan Police released a detailed description of the Salisbury poisoning and named the suspects wanted. The announcement went on to state that the investigation into the Amesbury poisoning was ongoing by the Police and the Crown Prosecution Service, and further charges relating to Sturgess and Rowley would follow.


title: 2018 Amesbury poisonings

text: The inquest for Sturgess was opened and adjourned by HM Coroner for Wiltshire and Swindon in Salisbury on 19 July 2018, with a Pre-Inquest Review listed for 16 January 2019. This was delayed, in part because the Crown Prosecution Service requested a suspension in view of the ongoing criminal investigation. The Senior Coroner, David Ridley, issued a 31-page ruling on the scope of the inquest on 20 December 2019, but no date for the full inquest was given.


title: 2018 Amesbury poisonings

text: On 5 July 2018, Home Secretary Sajid Javid chaired a meeting of the COBR committee to discuss the incident. In the House of Commons later that day, Javid stated the most likely hypothesis was that the Novichok was in an item discarded after the Skripal attack. He accused Russia of using Britain as a "dumping ground for poison".


title: 2018 Amesbury poisonings

text: Rowley gave an interview to ITV News on 24 July 2018, stating that he believed a sealed box of a recognisable brand of perfume, which he had found and given to Sturgess, was the source of the Novichok. His partner became sick "within 15 minutes" of spraying the "oily substance" onto her wrists before rubbing them together, under the assumption that it was perfume. He also stated that he came into contact with the chemical agent after some tipped onto his hands while attaching the plastic spray dispenser to the bottle, but had washed his hands soon after. They had used a knife to open the sealed packaging.


title: 2018 Amesbury poisonings

text: In June 2020 it was announced that the flat the poisonings happened in, together with the one below it, would be demolished. Both Dawn Sturgess’ family and partner supported the demolition and liked the idea of it being turned into a green space. Dawn's father, Stan Sturgess, said "It’s a shame that it is being lost but I can imagine that people wouldn’t want to live there." Rowley said "I think it's for the best. There would always be a stigma around it."


title: Peter F. Hamilton

text: Peter F. Hamilton (born 1960) is a British author. He is known for writing science fiction space opera.


title: Peter F. Hamilton

text: Peter F. Hamilton was born in Rutland in 1960. He did not attend university. He said in an interview, "I did science at school up to age eighteen, I stopped doing English, English literature, writing at sixteen, I just wasn't interested in those days".


title: Peter F. Hamilton

text: After he started writing in 1987, he sold his first short story to "Fear Magazine" in 1988. His first novel, "Mindstar Rising", was published during 1993, followed by "A Quantum Murder" and "The Nano Flower".


title: Peter F. Hamilton

text: He then wrote a space opera novel, named "The Night's Dawn Trilogy". He has also published the "Commonwealth Saga" with "Void Trilogy" and "The Chronicle of the Fallers" in the same universe.


title: Peter F. Hamilton

text: Since 2018, he has written the unrelated space opera "Salvation Sequence", and young adult sci-fi "Arkship Trilogy", set in original universes.


title: Domain Name System Security Extensions

text: The Domain Name System Security Extensions (DNSSEC) are a suite of extension specifications by the Internet Engineering Task Force (IETF) for securing data exchanged in the Domain Name System (DNS) in Internet Protocol (IP) networks. The protocol provides cryptographic authentication of data, authenticated denial of existence, and data integrity, but not availability or confidentiality.


title: Domain Name System Security Extensions

text: The original design of the Domain Name System did not include any security features. It was conceived only as a scalable distributed system. The Domain Name System Security Extensions (DNSSEC) attempt to add security, while maintaining backward compatibility. Request for Comments 3833 documents some of the known threats to the DNS, and their solutions in DNSSEC.


title: Domain Name System Security Extensions

text: DNSSEC was designed to protect applications using DNS from accepting forged or manipulated DNS data, such as that created by DNS cache poisoning. All answers from DNSSEC protected zones are digitally signed. By checking the digital signature, a DNS resolver is able to check if the information is identical (i.e. unmodified and complete) to the information published by the zone owner and served on an authoritative DNS server. While protecting IP addresses is the immediate concern for many users, DNSSEC can protect any data published in the DNS, including text records (TXT) and mail exchange records (MX), and can be used to bootstrap other security systems that publish references to cryptographic certificates stored in the DNS such as Certificate Records (CERT records, RFC 4398), SSH fingerprints (SSHFP, RFC 4255), IPSec public keys (IPSECKEY, RFC 4025), TLS Trust Anchors (TLSA, RFC 6698), or Encrypted Client Hello (SVCB/HTTPS records for ECH, ).


title: Domain Name System Security Extensions

text: DNSSEC "does not" provide confidentiality of data; in particular, all DNSSEC responses are authenticated but not encrypted. DNSSEC "does not" protect against DoS attacks directly, though it indirectly provides some benefit (because signature checking allows the use of potentially untrustworthy parties).


title: Domain Name System Security Extensions

text: Other standards (not DNSSEC) are used to secure bulk data (such as a DNS zone transfer) sent between DNS servers. As documented in IETF RFC 4367, some users and developers make false assumptions about DNS names, such as assuming that a company's common name plus ".com" is always its domain name. DNSSEC cannot protect against false assumptions; it can only authenticate that the data is truly from or not available from the domain owner.


title: Domain Name System Security Extensions

text: The DNSSEC specifications (called "DNSSEC-bis") describe the current DNSSEC protocol in great detail. See RFC 4033, RFC 4034, and RFC 4035. With the publication of these new RFCs (March 2005), an earlier RFC, RFC 2535 has become obsolete.


title: Domain Name System Security Extensions

text: It is widely believed that securing the DNS is critically important for securing the Internet as a whole, but deployment of DNSSEC specifically has been hampered () by several difficulties:


title: Domain Name System Security Extensions

text: DNSSEC works by digitally signing records for DNS lookup using public-key cryptography. The correct DNSKEY record is authenticated via a chain of trust, starting with a set of verified public keys for the DNS root zone which is the trusted third party. Domain owners generate their own keys, and upload them using their DNS control panel at their domain-name registrar, which in turn pushes the keys via secDNS to the zone operator (e.g., Verisign for .com) who signs and publishes them in DNS.


title: Domain Name System Security Extensions

text: DNS is implemented by the use of several resource records. To implement DNSSEC, several new DNS record types were created or adapted to use with DNSSEC:


title: Domain Name System Security Extensions

text: When DNSSEC is used, each answer to a DNS lookup contains an RRSIG DNS record, in addition to the record type that was requested. The RRSIG record is a digital signature of the answer DNS resource record set. The digital signature is verified by locating the correct public key found in a DNSKEY record. The NSEC and NSEC3 records are used to provide cryptographic evidence of the non-existence of any Resource Record (RR). The DS record is used in the authentication of DNSKEYs in the lookup procedure using the chain of trust. NSEC and NSEC3 records are used for robust resistance against spoofing.


title: Domain Name System Security Extensions

text: DNSSEC was designed to be extensible so that as attacks are discovered against existing algorithms, new ones can be introduced in a backward-compatible fashion. The following table defines, as of June 2019, the security algorithms that are most often used:


title: Domain Name System Security Extensions

text: From the results of a DNS lookup, a security-aware DNS resolver can determine whether the authoritative name server for the domain being queried supports DNSSEC, whether the answer it receives is secure, and whether there is some sort of error. The lookup procedure is different for recursive name servers such as those of many ISPs, and for stub resolvers such as those included by default in mainstream operating systems. Microsoft Windows uses a stub resolver, and Windows Server 2008 R2 and Windows 7 in particular use a non-validating but DNSSEC-aware stub resolver.


title: Domain Name System Security Extensions

text: Using the chain of trust model, a Delegation Signer (DS) record in a parent domain (DNS zone) can be used to verify a DNSKEY record in a subdomain, which can then contain other DS records to verify further subdomains. Say that a recursive resolver such as an ISP name server wants to get the IP addresses (A record and/or AAAA records) of the domain "www.example.com".


title: Domain Name System Security Extensions

text: First, if "example.com" does not support DNSSEC, there will be no RRSIG record in the answer and there will not be a DS record for "example.com" in the "com" zone. If there is a DS record for "example.com", but no RRSIG record in the reply, something is wrong and maybe a man in the middle attack is going on, stripping the DNSSEC information and modifying the A records. Or, it could be a broken security-oblivious name server along the way that stripped the DO flag bit from the query or the RRSIG record from the answer. Or, it could be a configuration error.


title: Domain Name System Security Extensions

text: Next, it may be that there is not a domain name named "www.example.com", in which case instead of returning a RRSIG record in the answer, there will be either an NSEC record or an NSEC3 record. These are "next secure" records that allow the resolver to prove that a domain name does not exist. The NSEC/NSEC3 records have RRSIG records, which can be verified as above.


title: Domain Name System Security Extensions

text: Finally, it may be that the "example.com" zone implements DNSSEC, but either the "com" zone or the root zone do not, creating an "island of security" which needs to be validated in some other way. , deployment of DNSSEC to root is completed. The .com domain was signed with valid security keys and the secure delegation was added to the root zone on 1 April 2011.


title: Domain Name System Security Extensions

text: Stub resolvers are "minimal DNS resolvers that use recursive query mode to offload most of the work of DNS resolution to a recursive name server." A stub resolver will simply forward a request to a recursive name server, and use the Authenticated Data (AD) bit in the response as a "hint to find out whether the recursive name server was able to validate signatures for all of the data in the Answer and Authority sections of the response." Microsoft Windows uses a stub resolver, and Windows Server 2008 R2 and Windows 7 in particular use a non-validating but AD-bit-aware stub resolver.


title: Domain Name System Security Extensions

text: A "validating stub resolver" can also potentially perform its own signature validation by setting the Checking Disabled (CD) bit in its query messages. A validating stub resolver uses the CD bit to perform its own recursive authentication. Using such a validating stub resolver gives the client end-to-end DNS security for domains implementing DNSSEC, even if the Internet service provider or the connection to them is not trusted.


title: Domain Name System Security Extensions

text: Non-validating stub resolvers must rely on external DNSSEC validation services, such as those controlled by the user's Internet service provider or a public recursive name server, and the communication channels between itself and those name servers, using methods such as DNS over TLS.


title: Domain Name System Security Extensions

text: To be able to prove that a DNS answer is correct, one needs to know at least one key or DS record that is correct from sources other than the DNS. These starting points are known as trust anchors and are typically obtained with the operating system or via some other trusted source. When DNSSEC was originally designed, it was thought that the only trust anchor that would be needed was for the DNS root. The root anchors were first published on 15 July 2010.


title: Domain Name System Security Extensions

text: An "authentication chain" is a series of linked DS and DNSKEY records, starting with a trust anchor to the authoritative name server for the domain in question. Without a complete authentication chain, an answer to a DNS lookup cannot be securely authenticated.


title: Domain Name System Security Extensions

text: To limit replay attacks, there are not only the normal DNS TTL values for caching purposes, but additional timestamps in RRSIG records to limit the validity of a signature. Unlike TTL values which are relative to when the records were sent, the timestamps are absolute. This means that all security-aware DNS resolvers must have clocks that are fairly closely in sync, say to within a few minutes.


title: Domain Name System Security Extensions

text: These timestamps imply that a zone must regularly be re-signed and re-distributed to secondary servers, or the signatures will be rejected by validating resolvers.


title: Domain Name System Security Extensions

text: DNSSEC involves many different keys, stored both in DNSKEY records, and from other sources to form trust anchors.


title: Domain Name System Security Extensions

text: In order to allow for replacement keys, a key rollover scheme is required. Typically, this involves first rolling out new keys in new DNSKEY records, in addition to the existing old keys. Then, when it is safe to assume that the time to live values have caused the caching of old keys to have passed, these new keys can be used. Finally, when it is safe to assume that the caching of records using the old keys have expired, the old DNSKEY records can be deleted. This process is more complicated for things such as the keys to trust anchors, such as at the root, which may require an update of the operating system.


title: Domain Name System Security Extensions

text: Keys in DNSKEY records can be used for two different things and typically different DNSKEY records are used for each. First, there are key signing keys (KSK) which are used to sign other DNSKEY records containing zone signing keys (ZSK), which are used to sign other records. Since the ZSKs are under complete control and use by one particular DNS zone, they can be switched more easily and more often. As a result, ZSKs can be much shorter than KSKs and still offer the same level of protection while reducing the size of the RRSIG/DNSKEY records.


title: Domain Name System Security Extensions

text: When a new KSK is created, the DS record must be transferred to the parent zone and published there. The DS records use a message digest of the KSK instead of the complete key in order to keep the size of the records small. This is helpful for zones such as the .com domain, which are very large. The procedure to update DS keys in the parent zone is also simpler than earlier DNSSEC versions that required DNSKEY records to be in the parent zone.


title: Domain Name System Security Extensions

text: DNS-based Authentication of Named Entities (DANE) is an IETF working group with the goal of developing protocols and techniques that allow Internet applications to establish cryptographically secured communications with TLS, DTLS, SMTP, and S/MIME based on DNSSEC.


title: Domain Name System Security Extensions

text: The new protocols will enable additional assurances and constraints for the traditional model based on public key infrastructure. They will also enable domain holders to assert certificates for themselves, without reference to third-party certificate authorities.


title: Domain Name System Security Extensions

text: Support for DNSSEC stapled certificates was enabled in Google Chrome 14, but was later removed. For Mozilla Firefox, support was provided by an add-on while native support is currently awaiting someone to start working on it.


title: Domain Name System Security Extensions

text: DNS is a critical and fundamental Internet service, yet in 1990 Steve Bellovin discovered serious security flaws in it. Research into securing it began, and progressed dramatically when his paper was made public in 1995. The initial RFC 2065 was published by the IETF in 1997, and initial attempts to implement that specification led to a revised (and believed fully workable) specification in 1999 as IETF RFC 2535. Plans were made to deploy DNSSEC based on RFC 2535.


title: Domain Name System Security Extensions

text: Unfortunately, the IETF RFC 2535 specification had very significant problems scaling up to the full Internet; by 2001 it became clear that this specification was unusable for large networks. In normal operation DNS servers often get out of sync with their parents. This isn't usually a problem, but when DNSSEC is enabled, this out-of-sync data could have the effect of a serious self-created denial of service. The original DNSSEC required a complex six-message protocol and a lot of data transfers to perform key changes for a child (DNS child zones had to send all of their data up to the parent, have the parent sign each record, and then send those signatures back to the child for the child to store in a SIG record). Also, public key changes could have absurd effects; for example, if the ".com" zone changed its public key, it would have to send 22 million records (because it would need to update all of the signatures in all of its children). Thus, DNSSEC as defined in RFC 2535 could not scale up to the Internet.


title: Domain Name System Security Extensions

text: The IETF fundamentally modified DNSSEC, which is called "DNSSEC-bis" when necessary to distinguish it from the original DNSSEC approach of RFC 2535. This new version uses "delegation signer (DS) resource records" to provide an additional level of indirection at delegation points between a parent and child zone. In the new approach, when a child's master public key changes, instead of having six messages for every record in the child, there is one simple message: the child sends the new public key to its parent (signed, of course). Parents simply store one master public key for each child; this is much more practical. This means that a little data is pushed to the parent, instead of massive amounts of data being exchanged between the parent and children. This does mean that clients have to do a little more work when verifying keys. More specifically, verifying a DNS zone's KEY RRset requires two signature verification operations instead of the one required by RFC 2535 (there is no impact on the number of signatures verified for other types of RRsets). Most view this as a small price to pay, since it makes DNSSEC deployment more practical.


title: Domain Name System Security Extensions

text: Cryptographically proving the absence of a domain requires signing the response to every query for a non-existent domain. This is not a problem for online signing servers, which keep their keys available online. However, DNSSEC was designed around using offline computers to sign records so that zone-signing-keys could be kept in cold storage. This represents a problem when trying to authenticate responses to queries for non-existent domains since it is impossible to pre-generate a response to every possible hostname query.


title: Domain Name System Security Extensions

text: The initial solution was to create NSEC records for every pair of domains in a zone. Thus if a client queried for a record at the non-existent codice_1, the server would respond with an NSEC record stating that nothing exists between codice_2 and codice_3. However, this leaks more information about the zone than traditional unauthenticated NXDOMAIN errors because it exposes the existence of real domains.


title: Domain Name System Security Extensions

text: The NSEC3 records (RFC 5155) were created as an alternative which hashes the name instead of listing them directly. Over time, advancements in hashing using GPUs and dedicated hardware meant that NSEC3 responses could be cheaply brute forced using offline dictionary attacks. NSEC5 has been proposed to allow authoritative servers to sign NSEC responses without having to keep a private key that can be used to modify the zone. Thus stealing an NSEC5KEY would only result in the ability to more easily enumerate a zone.


title: Domain Name System Security Extensions

text: Due to the messy evolution of the protocol and a desire to preserve backwards compatibility, online DNSSEC signing servers return a "white lie" instead of authenticating a denial of existence directly. The technique outlined in RFC 4470 returns a NSEC record in which the pairs of domains lexically surrounding the requested domain. For example, request for codice_1 would thus result in an NSEC record proving that nothing exists between the (fictitious) domains codice_5 and codice_6. This is also possible with NSEC3 records.


title: Domain Name System Security Extensions

text: CloudFlare pioneered a pair of alternative approaches, which manage to achieve the same result in one third of the response size. The first is a variation on the "white lies" approach, called "black lies", which exploits common DNS client behavior to state the nonexistence more compactly. The second approach instead chooses to prove that "the record exists but the requested record type does not", which they call "DNS shotgun".


title: Domain Name System Security Extensions

text: The Internet is critical infrastructure, yet its operation depends on the fundamentally insecure DNS.


title: Domain Name System Security Extensions

text: Thus, there is strong incentive to secure DNS, and deploying DNSSEC is generally considered to be a critical part of that effort.


title: Domain Name System Security Extensions

text: For example, the U.S. "National Strategy to Secure Cyberspace" specifically identified the need to secure DNS.


title: Domain Name System Security Extensions

text: Wide-scale deployment of DNSSEC could resolve many other security problems as well, such as secure key distribution for e-mail addresses.


title: Domain Name System Security Extensions

text: DNSSEC deployment in large-scale networks is also challenging. Ozment and Schechter observe that DNSSEC (and other technologies) has a "bootstrap problem": users typically only deploy a technology if they receive an immediate benefit, but if a minimal level of deployment is required before "any" users receive a benefit greater than their costs (as is true for DNSSEC), it is difficult to deploy. DNSSEC can be deployed at any level of a DNS hierarchy, but it must be widely available in a zone before many others will want to adopt it. DNS servers must be updated with software that supports DNSSEC, and DNSSEC data must be created and added to the DNS zone data. A TCP/IP-using client must have their DNS resolver (client) updated before it can use DNSSEC's capabilities. What is more, any resolver must have, or have a way to acquire, at least one public key that it can trust before it can start using DNSSEC.


title: Domain Name System Security Extensions

text: DNSSEC implementation can add significant load to some DNS servers. Common DNSSEC-signed responses are far larger than the default UDP size of 512 bytes. In theory, this can be handled through multiple IP fragments, but many "middleboxes" in the field do not handle these correctly. This leads to the use of TCP instead. Yet many current TCP implementations store a great deal of data for each TCP connection; heavily loaded servers can run out of resources simply trying to respond to a larger number of (possibly bogus) DNSSEC requests. Some protocol extensions, such as TCP Cookie Transactions, have been developed to reduce this loading. To address these challenges, significant effort is ongoing to deploy DNSSEC, because the Internet is so vital to so many organizations.


title: Domain Name System Security Extensions

text: Early adopters include Brazil (.br), Bulgaria (.bg), Czech Republic (.cz), Namibia (.na) Puerto Rico (.pr) and Sweden (.se), who use DNSSEC for their country code top-level domains; RIPE NCC, who have signed all the reverse lookup records (in-addr.arpa) that are delegated to it from the Internet Assigned Numbers Authority (IANA). ARIN is also signing their reverse zones. In February 2007, TDC became the first Swedish ISP to start offering this feature to its customers.


title: Domain Name System Security Extensions

text: IANA publicly tested a sample signed root since June 2007. During this period prior to the production signing of the root, there were also several alternative trust anchors. The IKS Jena introduced one on January 19, 2006, the Internet Systems Consortium introduced another on March 27 of the same year, while ICANN themselves announced a third on February 17, 2009.


title: Domain Name System Security Extensions

text: On June 2, 2009, Afilias, the registry service provider for Public Interest Registry's .org zone signed the .org TLD. Afilias and PIR also detailed on September 26, 2008, that the first phase, involving large registrars it has a strong working relationship with ("friends and family") would be the first to be able to sign their domains, beginning "early 2009". On June 23, 2010, 13 registrars were listed as offering DNSSEC records for .ORG domains.


title: Domain Name System Security Extensions

text: VeriSign ran a pilot project to allow .com and .net domains to register themselves for the purpose of NSEC3 experimentation. On February 24, 2009, they announced that they would deploy DNSSEC across all their top-level domains (.com, .net, etc.) within 24 months, and on November 16 of the same year, they said the .com and .net domains would be signed by the first quarter of 2011, after delays caused by technical aspects of the implementation. This goal was achieved on-schedule and Verisign's DNSSEC VP, Matt Larson, won InfoWorld's Technology Leadership Award for 2011 for his role in advancing DNSSEC.


title: Domain Name System Security Extensions

text: DNSSEC was first deployed at the root level on July 15, 2010. This is expected to greatly simplify the deployment of DNSSEC resolvers, since the root trust anchor can be used to validate any DNSSEC zone that has a complete chain of trust from the root. Since the chain of trust must be traced back to a trusted root without interruption in order to validate, trust anchors must still be configured for secure zones if any of the zones above them are not secure. For example, if the zone "signed.example.org" was secured but the "example.org" zone was not, then, even though the ".org" zone and the root are signed, a trust anchor has to be deployed in order to validate the zone.


title: Domain Name System Security Extensions

text: Political issues surrounding signing the root have been a continuous concern, primarily about some central issues:


title: Domain Name System Security Extensions

text: In September 2008, ICANN and VeriSign each published implementation proposals and in October, the National Telecommunications and Information Administration (NTIA) asked the public for comments. It is unclear if the comments received affected the design of the final deployment plan.


title: Domain Name System Security Extensions

text: On June 3, 2009, the National Institute of Standards and Technology (NIST) announced plans to sign the root by the end of 2009, in conjunction with ICANN, VeriSign and the NTIA.


title: Domain Name System Security Extensions

text: On October 6, 2009, at the 59th RIPE Conference meeting, ICANN and VeriSign announced the planned deployment timeline for deploying DNSSEC within the root zone. At the meeting it was announced that it would be incrementally deployed to one root name server a month, starting on December 1, 2009, with the final root name server serving a DNSSEC signed zone on July 1, 2010, and the root zone will be signed with a RSA/SHA256 DNSKEY. During the incremental roll-out period the root zone will serve a "Deliberately Unvalidatable Root Zone" (DURZ) that uses dummy keys, with the final DNSKEY record not being distributed until July 1, 2010. This means the keys that were used to sign the zone use are deliberately unverifiable; the reason for this deployment was to monitor changes in traffic patterns caused by the larger responses to queries requesting DNSSEC resource records.


title: Domain Name System Security Extensions

text: The .org top-level domain has been signed with DNSSEC in June 2010, followed by .com, .net, and .edu later in 2010 and 2011. Country code top-level domains were able to deposit keys starting in May 2010. more than 25% of top-level domains are signed with DNSSEC.


title: Domain Name System Security Extensions

text: On January 25, 2010, the L (ell) root server began serving a "Deliberately Unvalidatable Root Zone" (DURZ). The zone uses signatures of a SHA-2 (SHA-256) hash created using the RSA algorithm, as defined in RFC 5702. As of May 2010, all thirteen root servers have begun serving the DURZ. On July 15, 2010, the first root full production DNSSEC root zone was signed, with the SOA serial 2010071501. Root trust anchors are available from IANA.


title: Domain Name System Security Extensions

text: Underneath the root there is a large set of top-level domains that must be signed in order to achieve full DNSSEC deployment. The List of Internet top-level domains provides details about which of the existing top-level domains have been signed and linked to the root.


title: Domain Name System Security Extensions

text: In March 2006, the Internet Systems Consortium introduced the DNSSEC Lookaside Validation registry. DLV was intended to make DNSSEC easier to deploy in the absence of a root trust anchor. At the time it was imagined that a validator might have to maintain large numbers of trust anchors corresponding to signed subtrees of the DNS. The purpose of DLV was to allow validators to offload the effort of managing a trust anchor repository to a trusted third party. The DLV registry maintained a central list of trust anchors, instead of each validator repeating the work of maintaining its own list.


title: Domain Name System Security Extensions

text: To use DLV, a validator that supports it was needed, such as BIND or Unbound, configured with a trust anchor for a DLV zone. This zone contained DLV records; these had exactly the same format as DS records, but instead of referring to a delegated sub-zone, they referred to a zone elsewhere in the DNS tree. When the validator could not find a chain of trust from the root to the RRset it is trying to check, it searched for a DLV record that could provide an alternative chain of trust.


title: Domain Name System Security Extensions

text: Gaps in the chain of trust, such as unsigned top-level domains or registrars that did not support DNSSEC delegations, meant administrators of lower-level domains could use DLV to allow their DNS data to be validated by resolvers which had been configured to use DLV. This may have hindered DNSSEC deployment by taking pressure off registrars and TLD registries to properly support DNSSEC. DLV also added complexity by adding more actors and code paths for DNSSEC validation.


title: Domain Name System Security Extensions

text: ISC decommissioned its DLV registry in 2017. DLV support was deprecated in BIND 9.12 and completely removed from BIND 9.16. Unbound version 1.5.4 (July 2015) marked DLV as decommissioned in the example configuration and manual page. Knot Resolver and PowerDNS Recursor never implemented DLV.


title: Domain Name System Security Extensions

text: In March 2020, the IETF published RFC 8749, retiring DLV as a standard and moving RFC 4432 and RFC 5074 to "Historic" status.


title: Domain Name System Security Extensions

text: The Science and Technology Directorate of the U.S. Department of Homeland Security (DHS) sponsors the "DNSSEC Deployment Initiative".


title: Domain Name System Security Extensions

text: This initiative encourages "all sectors to voluntarily adopt security measures that will improve security of the Internet's naming infrastructure, as part of a global, cooperative effort that involves many nations and organizations in the public and private sectors."


title: Domain Name System Security Extensions

text: It was reported that on March 30, 2007, the U.S. Department of Homeland Security proposed "to have the key to sign the DNS root zone solidly in the hands of the US government." However no U.S. Government officials were present in the meeting room and the comment that sparked the article was made by another party. DHS later commented on why they believe others jumped to the false conclusion that the U.S. Government had made such a proposal: "The U.S. Department of Homeland Security is funding the development of a technical plan for implementing DNSSec, and last October distributed an initial draft of it to a long list of international experts for comments. The draft lays out a series of options for who could be the holder, or "operator," of the Root Zone Key, essentially boiling down to a governmental agency or a contractor. "Nowhere in the document do we make any proposal about the identity of the Root Key Operator," said Maughan, the cyber-security research and development manager for Homeland Security."


title: Domain Name System Security Extensions

text: The National Institute of Standards and Technology (NIST) published NIST Special Publication 800-81 Secure Domain Name System (DNS) Deployment Guide on May 16, 2006, with guidance on how to deploy DNSSEC. NIST intended to release new DNSSEC Federal Information Security Management Act (FISMA) requirements in NIST SP800-53-R1, referencing this deployment guide. U.S. agencies would then have had one year after final publication of NIST SP800-53-R1 to meet these new FISMA requirements. However, at the time NSEC3 had not been completed. NIST had suggested using split domains, a technique that is known to be possible but is difficult to deploy correctly, and has the security weaknesses noted above.


title: Domain Name System Security Extensions

text: On 22 August 2008, the Office of Management and Budget (OMB) released a memorandum requiring U.S. Federal Agencies to deploy DNSSEC across .gov sites; the .gov root must be signed by January 2009, and all subdomains under .gov must be signed by December 2009. While the memo focuses on .gov sites, the U.S. Defense Information Systems Agency says it intends to meet OMB DNSSEC requirements in the .mil (U.S. military) domain as well. NetworkWorld's Carolyn Duffy Marsan stated that DNSSEC "hasn't been widely deployed because it suffers from a classic chicken-and-egg dilemma... with the OMB mandate, it appears the egg is cracking."


title: Domain Name System Security Extensions

text: Several ISPs have started to deploy DNSSEC-validating DNS recursive resolvers. Comcast became the first major ISP to do so in the United States, announcing their intentions on October 18, 2010 and completing deployment on January 11, 2012.


title: Domain Name System Security Extensions

text: According to a study at APNIC, the proportion of clients who exclusively use DNS resolvers that perform DNSSEC validation rose to 8.3% in May 2013. About half of these clients were using Google's public DNS resolver.


title: Domain Name System Security Extensions

text: In September 2015, Verisign announced their free public DNS resolver service, and although unmentioned in their press releases, it also performs DNSSEC validation.


title: Domain Name System Security Extensions

text: By the beginning of 2016, APNIC's monitoring showed the proportion of clients who exclusively use DNS resolvers that perform DNSSEC validation had increased to about 15%.


title: Domain Name System Security Extensions

text: The Quad9 public recursive DNS has performed DNSSEC validation on its main 9.9.9.9 address since it was established on May 11, 2016. Quad9 also provides an alternate service which does not perform DNSSEC validation, principally for debugging.


title: Domain Name System Security Extensions

text: DNSSEC deployment requires software on the server and client side. Some of the tools that support DNSSEC include:


title: Joseph-Ignace Guillotin

text: Joseph-Ignace Guillotin (; 28 May 1738 – 26 March 1814) was a French physician, politician, and freemason who proposed on 10 October 1789 the use of a device to carry out death penalties in France, as a less painful method of execution than existing methods. Although he did not invent the guillotine and opposed the death penalty, his name became an eponym for it. The actual inventor of the prototype was a man named Tobias Schmidt, working with the king's physician, Antoine Louis.


title: Joseph-Ignace Guillotin

text: Guillotin was born on 28 May 1738 in Saintes, France, the second son of Joseph-Alexandre Guillotin and Catherine Agatha Martin. Legend has it that he was born prematurely because his mother was in distress after hearing the screams of a man being tortured to death on the breaking wheel.


title: Joseph-Ignace Guillotin

text: Guillotin's early education was by the Jesuits in Bordeaux and he earned a Master of Arts degree at the College of Aquitaine of the University of Bordeaux in December 1761. The essay that he wrote to earn the degree impressed the Jesuits so much that they invited him to become a professor of literature at the Irish College in Bordeaux. However, he left after a few years and travelled to Paris to study medicine, becoming a pupil of Antoine Petit. He gained a diploma from the faculty at Reims in 1768 and his doctorate at the School of Medicine in Paris in 1770, which also gave him the title of Doctor-Regent. This allowed him to teach medicine in Paris.


title: Joseph-Ignace Guillotin

text: In Paris, Guillotin became a well-known physician. By 1775, he was concerned with issues of torture and death. That year, he wrote a memo proposing that criminals be used as subjects in medical experiments. Although he recognised that as cruel, he considered it preferable to being put to death. In 1784, when Franz Mesmer began to publicize his theory of "animal magnetism", which was considered offensive by many, Louis XVI appointed a commission to investigate it and Guillotin was appointed a member, along with Jean Sylvain Bailly, Antoine Laurent de Jussieu, Antoine Lavoisier, and Benjamin Franklin. The commission declared Mesmer to be a fraud, and this put Guillotin in the public eye.


title: Joseph-Ignace Guillotin

text: In December 1788, Guillotin drafted a pamphlet entitled "Petition of the Citizens Living in Paris", concerning the proper constitution of the Estates-General. The French parliament attempted to suppress his pamphlet and summoned him to give an account of his opinions, but the crowd during his testimony was very much in support of him, and he was released, which served to increase his popularity. On 2 May 1789, he became one of 10 Paris deputies in the Estates-General of 1789 and was secretary to the body from June 1789 to October 1791. On 20 June 1789, the National Assembly, as the members were now calling themselves, found itself locked out of its chamber. Guillotin suggested they reconvene in a nearby "jeu de paume" court, where the members swore the Tennis Court Oath, vowing "not to separate and to reassemble wherever circumstances require, until the Constitution of the kingdom is established".


title: Joseph-Ignace Guillotin

text: As a member of the assembly, Guillotin initially directed his attention towards medical reform. As a member of the Poverty Committee, he toured the Hôtel-Dieu and contributed to the report that exposed the unsanitary conditions there. He also became first chair of the Health Committee and submitted a bill for medical reform in 1791.


title: Joseph-Ignace Guillotin

text: At the same time, he was also concerned with criminal law reform. His experiences as a doctor had led him to oppose capital punishment: at first, he attempted to abolish it, but was unsuccessful. At that time, beheading in France was typically by axe or sword, which did not always cause immediate death. Additionally, beheading was reserved for the nobility, while commoners were typically hanged, which could take a long time, as the techniques whereby the victim's neck was broken by the noose had not yet been invented. Other methods included burning at the stake, the breaking wheel, death by boiling, and dismemberment. Guillotin realised that, if he could not eliminate executions, he could at least make them more humane.


title: Joseph-Ignace Guillotin

text: On 10 October 1789, he proposed that "the criminal shall be decapitated; this will be done solely by means of a simple mechanism." The "mechanism" was defined as "a machine that beheads painlessly". His proposal appeared in the Royalist periodical, "Les Actes des Apôtres". In all, Guillotin proposed six articles:


title: Joseph-Ignace Guillotin

text: Guillotin assumed that, if a fair system was established where the only method of capital punishment was by mechanical decapitation, then the public would feel more appreciative of their rights. Despite this proposal, Guillotin was opposed to the death penalty, and hoped that a more humane and less painful method of execution would be the first step towards total abolition. He also hoped that, as the decapitation machine would kill quickly without prolonged suffering, this would reduce the size and enthusiasm of crowds that often witnessed executions.


title: Joseph-Ignace Guillotin

text: On 1 December 1789, Guillotin made a remark during a follow-up speech to the Assembly about capital punishment. He was quoted (or possibly misquoted) as saying, "Now, with my machine, I cut off your head in the twinkling of an eye, and you never feel it!" The statement quickly became a popular joke, and a few days after the debate a comic song about Guillotin and "his" machine circulated, forever tying his name to it, despite the fact that he was not at all involved in its design or construction. The "Moniteur" of 18 December 1789 deplored the joking but repeated Guillotin's "twinkling of an eye" statement for posterity.


title: Joseph-Ignace Guillotin

text: The articles were fairly controversial as the rights of the criminals and their families had not previously been considered, but they were accepted over the course of several years, with the "decapitation by simple machine" finally being accepted on 3 June 1791, with the result that his proposals became law on 20 March 1792. Meanwhile, the Assembly had commissioned Antoine Louis to build such a device. His proposal was presented on 17 March, and the first executions using it took place on 25 April 1792. However, by October 1791, Guillotin had already retired from the Assembly, returning to practise medicine. During the Reign of Terror, he moved to Arras to become the director of the military hospital there, returning to Paris a year later.


title: Joseph-Ignace Guillotin

text: Towards the end of the Reign of Terror, a letter from the Comte de Méré to Guillotin fell into the hands of the public prosecutor, Fouquier-Tinville in which the Count, who was to be executed, commended his wife and children to Guillotin's care. The authorities demanded Guillotin inform them of the whereabouts of the Count's wife and children. As Guillotin either would not or could not give the information, he was arrested and imprisoned. He was freed from prison in the general amnesty of 9 Thermidor (27 July) 1794 after Robespierre fell from power.


title: Joseph-Ignace Guillotin

text: In November 1795, a letter was published in the "Moniteur" claiming that the guillotine's victims survived for several minutes after beheading. Guillotin was shocked, and for the remainder of his life, he deeply regretted that the machine was named after him. His continued efforts to abolish the death penalty were hampered by the widespread belief that the person who proposed using a decapitation machine to carry out executions must surely be in favour of it.


title: Joseph-Ignace Guillotin

text: Guillotin became one of the first French doctors to support Edward Jenner's discovery of vaccination, and in 1805 was the chairman of the Central Vaccination Committee in Paris. He also founded one of the precursors of the National Academy of Medicine.


title: Joseph-Ignace Guillotin

text: The association with the guillotine so embarrassed Guillotin's family that they petitioned the French government to rename it; when the government refused, they instead changed their own family name. By coincidence, another person named Guillotin was indeed executed by the guillotinehe was J.M.V. Guillotin, a doctor of Lyon. This coincidence may have contributed to erroneous statements that J-I Guillotin was put to death on the machine that bears his name; however, in reality, Guillotin died at home in Paris in 1814 of natural causes, aged 75, specifically from a carbuncle, and is now buried in the Père-Lachaise Cemetery in Paris. He was married to Louise Saugrain, sister of the physician and chemist Antoine Saugrain.


title: Joseph-Ignace Guillotin

text: Joseph Guillotin was initiated into Freemasonry, in 1765 at "La Parfaite Union" lodge in Angoulême. Very active as a mason, he joined several other lodges. As a deputy of the Grand Lodge from 1772 he took part in the birth of the Grand Orient of France and attended all its conventions until 1790. In 1773, he became Worshipful Master of the lodge "La Concorde Fraternelle" in Paris. In 1776, he founded the "La Vérité" lodge and often attended Les Neuf Sœurs.


title: Joseph-Ignace Guillotin

text: Guillotin features in Andrew Miller's Costa prize-winning novel "Pure". He is also a primary character in the 1992 novel "Dr Guillotine", written by the actor Herbert Lom.


title: Outland (film)

text: Outland is a 1981 science fiction thriller film written and directed by Peter Hyams and starring Sean Connery, Peter Boyle, and Frances Sternhagen.


title: Outland (film)

text: Set on Jupiter's moon Io, it has been described as a space Western, and bears thematic resemblances to the 1952 film "High Noon".


title: Outland (film)

text: Federal Marshal William O'Niel is assigned to a tour of duty at the titanium ore mining outpost Con-Am 27, operated by the company Con-Amalgamate on the Jovian moon of Io. Conditions on Io are difficult; gravity is 1/6 that of Earth's with no breathable atmosphere, and the spacesuits are cumbersome with limited air. Shifts are long but significant bonuses are paid. The general manager, Mark Sheppard, boasts that productivity has broken all records since he took over. Carol, O'Niel's wife, feels she cannot raise their son Paul on Io and leaves with their child to the Jupiter space station to await a shuttle back to Earth. Tarlow, a miner, suffers an attack of stimulant psychosishe sees spiders and rips open his spacesuitresulting in death by explosive decompression. Cane, another miner, enters an elevator without his spacesuit during another psychotic episode and dies from decompression. With the reluctant assistance of Dr. Lazarus, O'Niel investigates the deaths.


title: Outland (film)

text: Another incident involves a worker, Sagan, who takes a prostitute hostage and threatens to kill her with a knife. O'Niel attempts to calm the man while Montone, his sergeant, sneaks in via the air duct and kills Sagan with a shotgun. O'Niel and Lazarus discover that Sagan had traces of polydichloric euthimal, a powerful amphetamine-type drug in his bloodstream, which would allow the miners to work continuously for days at a time until they burn out and turn psychotic after approximately ten months of use. O'Niel uncovers a drug distribution ring run by a corrupt Sheppard and sanctioned by now repentant Montone.


title: Outland (film)

text: Using surveillance cameras, O'Niel finds and captures Nicholas Spota, one of Sheppard's dealers, who is murdered before he can be questioned. Montone is found garrotted. In a meat locker, O'Niel finds the latest shipment of drugs, which was shipped from the space station. He is then attacked there by another dealer, Russell Yario. O'Niel knocks him out, then destroys the shipment of drugs. When Sheppard finds out, he threatens O'Niel and contacts his drug distributor, asking him to send in professional hitmen. O'Niel is prepared, having been monitoring Sheppard's communications.


title: Outland (film)

text: O'Niel waits for the arrival of the hitmen on a supply shuttle from the other side of Jupiter. Realizing what is coming and with only Dr. Lazarus willing to help him, O'Niel sends a message to his family promising to return to Earth when his "job is done". O'Niel ambushes the hitmen one by one. Lazarus helps him kill the first by trapping him in a pressurized corridor; O'Niel activates a bomb, causing an explosive decompression that kills the hitman. The second is killed in a glass greenhouse structure of the outpost when O'Niel tricks him into shooting a window, causing it to break open and blow him out to his death by explosive decompression.


title: Outland (film)

text: O'Niel is then confronted and attacked by Sheppard's inside man - one of his own deputies, Sgt. Ballard. The two fight outside the outpost near the satellite structure until O'Niel pulls Ballard's oxygen hose, suffocating him as he pushes him into an electrical generation station, vaporizing him on impact. O'Niel then confronts the surprised Sheppard inside the outpost's recreation bar, knocking him out with one punch. It is implied Sheppard will now be brought to justice or murdered by his own associates. O'Niel, however, has already contacted his superiors about Sheppard's associates, some of whom are Con-Am executives, and shortly before his departure receives a communication that warrants have been issued for their arrests. O'Niel bids farewell to Lazarus and leaves on the shuttle to join his wife and son on the journey back to Earth.


title: Outland (film)

text: Hyams recalled, I wanted to do a Western. Everybody said, 'You can't do a Western; Westerns are dead; nobody will do a Western'. I remember thinking it was weird that this genre that had endured for so long was just gone. But then I woke up and came to the conclusion – obviously after other people – that it was actually alive and well, but in outer space. I wanted to make a film about the frontier. Not the wonder of it or the glamour of it: I wanted to do something about Dodge City and how hard life was. I wrote it, and by great fortune Sean Connery wanted to do it. And how many chances do you get to work with Sean Connery?


title: Outland (film)

text: The film was developed at Universal by Hyams and producer Richard Roth. Universal turned it down then Roth, who had a development deal at 20th Century Fox under Alan Ladd Jr, took the project to Ladd's new company, The Ladd Company.


title: Outland (film)

text: "Outland" was filmed at Pinewood Studios, Iver Heath, Buckinghamshire, UK, with an initial budget of $12 million.


title: Outland (film)

text: The film's working title was "Io" after the setting of the film. This was later changed because many people read it as the number 10, or "Lo" ("low"). Principal photography took place starting with the miniature models in May 1980 and with the actors beginning in June 1980. Post-production for the film was completed in February 1981.


title: Outland (film)

text: "Outland" was pioneering as the first motion picture to use Introvision, a variation on front projection that allows foreground, mid-ground and background elements to be combined in the camera, as opposed to using optical processes such as bluescreen matting. This enabled characters to convincingly walk around miniature sets of the mining colony.


title: Outland (film)

text: The music to "Outland" was composed and conducted by veteran composer Jerry Goldsmith, who had previously worked with writer/director Peter Hyams on the science fiction thriller "Capricorn One" (1978) and had recently provided the soundtrack to "Alien" (which had a similar style to "Outland", reflecting isolation, remoteness and fear). The soundtrack to "Outland" has been released three times on disc; 19 November 1993 through GNP Crescendo (with his score to "Capricorn One"), June 2000 through Warner Music Group, and a two-disc extended edition released 15 June 2010 through "Film Score Monthly". The expanded release also includes the John Williams music for the Ladd Company logo, the material composed by Morton Stevens for the fight between O'Niel and Ballard and the source cues for the rec room by Michael Boddicker.


title: Outland (film)

text: The distributed 35mm film prints have Dolby Stereo audio and the 70mm Anamorphic Blow-Up film prints featured Six-Track Dolby Stereo audio. All 70mm prints were encoded for a Megasound option, in which theaters needed to be outfitted with more speakers and sound equipment. "Outland" was one of four films released by Warner Bros. to officially make use of their Megasound movie theater sound system, in the early 1980s.


title: Outland (film)

text: The film received mixed reviews and box office reception when it was released. It opened strongly with $3,059,638 in weekend box office receipts in the U.S. According to the "New York Times" on its opening weekend the film was "sensational in Los Angeles and on New York's East Side" but "played poorly in many small cities. By platforming "Outland" – opening it in less than 350 theaters to allow it to build an audience rather slowly – the company gambled that the movie would appeal to ticketbuyers; the picture will be in trouble if it drops off at the box office this weekend."


title: Outland (film)

text: Total estimated box offices receipts in the country wound up being between $17,374,595 and $20,000,000, just above its $16 million budget.


title: Outland (film)

text: The film was nominated for the Academy Award for Best Sound (John Wilkinson, Robert W. Glass Jr., Robert Thirlwell and Robin Gregory).


title: Outland (film)

text: Gary Arnold at "The Washington Post" had this to say: "In "Outland", writer-director Peter Hyams has adapted the plot of "High Noon" to an intriguing sci-fi environment—a huge titanium mine located on Io, a volcanic moon of Jupiter. But the conventions that worked for "High Noon" break down in the high-tech atmosphere of "Outland" and the story seems trite and dinky".


title: Outland (film)

text: In "The Boston Globe", Michael Blowen was more favorable: "The parallels between "Outland" and Fred Zinneman's 1952 western "High Noon" are apparent. Writer-director Peter Hyams has transported the characters and motifs from the dusty frontier town of Gary Cooper to the frontiers of space. While Hyams keeps the story barreling along, he also develops a corollary anti-capitalist theme. Io is an outpost for exploitation, and it doesn't make any difference whether the miners are digging gold in the Colorado hills or titanium on Jupiter's moon, the greed of the corporate class will prevail. "Outland" marks the return of the classic western hero in a space helmet. His outfit has changed and his environment has expanded but he's still the same. When Connery stares down the barrel of that shotgun, you'd better smile".


title: Outland (film)

text: Desmond Ryan at "The Philadelphia Inquirer" called it: "A brilliant sci-fi Western. In many ways, Hyams has made a film that is more frightening than "Alien", because he surmises that space will change us very little and the real monsters we are liable to encounter will be in the next space suit."


title: Outland (film)

text: Christopher John reviewed "Outland" in "Ares Magazine" #10 and commented that ""Outland" is a good movie, and not just for science fiction fans. Its success will undoubtedly inspire a few tired, low-grade imitations. Hopefully, it will inspire a few more solid, interesting and entertaining films as well."


title: Outland (film)

text: David Harkin at Taste of Cinema suggested that 'Outland is a perfect example of Sean Connery in transition from leading man to older statesman of Hollywood'.


title: Outland (film)

text: "Outland" was first released for home video on VHS, Beta, and V2000 videotape formats in November 1982. The film had many re-issues on VHS and between 1982 and 1998, including a widescreen NTSC VHS on 7 January 1997. Videodisc releases included the CED disc in August 1983, a Laserdisc release in 1984, and a remastered laserdisc with digital sound on 28 August 1991.


title: Outland (film)

text: "Outland" was released on DVD on 18 November 1997. It was presented in both letterbox widescreen and full screen on a double sided disc with the soundtrack remastered in Dolby 5.1 surround sound. The Region 1 DVD received harsh criticism for its poor quality transfer, and absence of enhancement for widescreen televisions. A "making of" featurette, cast and credit notes, plus a theatrical trailer are included as special features on the disc. The film was released on DVD in the UK (Region 2) in 1998. This version is anamorphically enhanced for widescreen televisions, as is the Region 4 release. "Outland" was released on Blu-ray Disc on 10 July 2012. The film is presented in an aspect ratio of 2.40:1 with an English DTS-HD Master Audio 5.1 surround sound mix. The disc also features a brand new commentary audio-track with the director Peter Hyams.


title: Outland (film)

text: "Outland" debuted on pay TV in the U.S. in September 1982 on the HBO and Showtime channels. In Canada, the film was first shown in October 1983 on Superchannel. The film was broadcast uncut, commercial-free, and periodically over several months, in both countries. These pay TV broadcasts of "Outland" used the same source as the initial NTSC home video release.


title: Outland (film)

text: The network TV premiere for "Outland" was on 19 May 1984 via CBS in the U.S. and was simulcasted on CTV in Canada. This re-edited version of the film, broadcast exclusively on these networks, utilized cut footage not seen in the theatrical/home video version. One notable example is an extended scene showing a more lengthy exit from the station for O'Niel and also Ballard near the end of the film suited-up while exiting; these cutting-room-floor scenes were made available for the network to extend parts of the film which allowed them to sell more commercial slots to advertisers. The inclusion of left-over footage (if made available) was common practice during the 1970s to 1980s, for network film premieres and subsequently licensed broadcasts. This version was labeled "edited for television" to comply with U.S. network television censorship standards of the time and never released to home video.


title: Rousimar Palhares

text: Rousimar Christian Palhares (;, born February 20, 1980) is a Brazilian mixed martial artist. A professional competitor since 2006, he has competed for the UFC, World Series of Fighting, and KSW. His nickname "Toquinho" (), Portuguese for "little tree stump", comes from his short, stocky, heavily muscled build and the low success rate his opponents have had in grappling him down to the canvas. Palhares is primarily known for his powerful ground game. Of his 16 submission victories 12 have come from leg locks. He is also known for his refusal to release submission holds when either the opposing fighter has signaled submission or the referee has called a stop to the bout, causing him to be fired by the UFC, and WSOF.


title: Rousimar Palhares

text: Palhares grew up in abject poverty in the Brazilian countryside. He recalls working in the fields to help support his family as young as age seven and said that there were times where there was not enough food for everyone. He eventually had to leave his shanty and move underneath a local bridge in a tent city slum. Palhares began training in Brazilian jiu-jitsu at the age of 15, before moving to Rio de Janeiro to compete professionally.


title: Rousimar Palhares

text: He claimed the Fury Fighting Championship Middleweight Championship in December 2007 after defeating Flavio Mura, Pan-Am Jiu-Jitsu champion Fabio Negao, and Chute Boxe's Daniel Acacio in a tournament.


title: Rousimar Palhares

text: Palhares earned his Brazilian Jiu-Jitsu black belt under former UFC Middleweight Champion Murilo Bustamante and Bebeo Duarte. Experts in martial arts touted Palhares as one of the most naturally gifted grapplers today.


title: Rousimar Palhares

text: Having spent his entire early career competing in Brazil, Palhares's first bout outside his home country was in the United States at UFC 84. He is considered to be one of the best in the world at leg locks, such as the heel hook and kneebar.


title: Rousimar Palhares

text: Palhares took 2nd place in the under 88 kg 2011 ADCC, finishing his first three opponents quickly with leg locks, before losing to established World Champion Andre Galvao in the final, by points.


title: Rousimar Palhares

text: Palhares fought against former PRIDE Middleweight & Welterweight Champion Dan Henderson at UFC 88. Henderson defeated Palhares by unanimous decision handing Palhares his first loss in the UFC.


title: Rousimar Palhares

text: Palhares quickly rebounded from the loss to defeat veteran Jeremy Horn at UFC 93 by unanimous decision. Palhares was expected to face Italian Alessio Sakara on December 5, 2009, at , but due to an injury while training, Sakara had to withdraw. On December 12, 2009, at UFC 107 Palhares fought against Lucio Linhares and defeated Linhares by heel hook.


title: Rousimar Palhares

text: At UFC 111, Palhares defeated Tomasz Drwal by heel hook 45 seconds into the first round. He was, however, subsequently suspended for 90 days for continuing to crank the submission even after Drwal had tapped and referee Kevin Mulhall stepped in to stop the fight.


title: Rousimar Palhares

text: Palhares was expected to face Nate Marquardt on August 28, 2010, at UFC 118, however the bout was moved to September 15, 2010, to headline UFC Fight Night 22 after Alan Belcher was forced to pull out of his bout with Demian Maia with an eye injury. Marquardt defeated Palhares via first round TKO. During the fight, Palhares claimed that Marquardt had greased his leg after failing to secure a leg lock on the ground. Marquardt attacked, catching Palhares off guard as he was complaining to the referee and won the fight through a ground-and-pound stoppage. Palhares would later apologize for his actions during the fight after it was determined by officials that Marquardt's leg was not greased.


title: Rousimar Palhares

text: Palhares was expected to face Alexandre Ferreira on March 3, 2011, at . However, on January 18, Ferreira was dismissed from Chute Boxe Academy, his home training camp, for a "lack of commitment." Less than an hour later, it was reported that the fight had been cancelled due to Ferreira losing family and friends in the Brazilian floods, resulting in him being in "no condition to train or fight." David Branch replaced Ferriera. Palhares defeated Branch via second round submission (kneebar).


title: Rousimar Palhares

text: Palhares/Ferreira was expected to take place on August 27, 2011, at UFC 134. However, Ferreira was forced out of the bout with an injury and replaced by Dan Miller. Palhares would defeat Miller by unanimous decision, although there was some controversy when Palhares dropped Miller in the first round and after a few follow up punches, incorrectly thought the fight was over.


title: Rousimar Palhares

text: Palhares next faced Mike Massenzio on January 14, 2012, at UFC 142 He defeated Massenzio by heel hook in the first round, earning him his second "Submission of the Night" bonus.


title: Rousimar Palhares

text: Palhares then faced Alan Belcher on May 5, 2012, at UFC on Fox 3. After getting the fight to the ground, Palhares was almost caught on a twister attempt by Belcher. Palhares was able to escape and proceeded to attempt various types of leglocks, which were all defended by Belcher. After some action, Palhares ended on his back, eventually succumbing to Belcher's ground and pound at 4:18 of the first round.


title: Rousimar Palhares

text: Palhares was expected to replace an injured Luiz Cane against Yushin Okami on August 11, 2012, at UFC 150. However Palhares himself was injured and forced out of the bout.


title: Rousimar Palhares

text: Palhares faced Héctor Lombard on December 15, 2012, at UFC on FX 6 where he lost via KO at 3:38 of Round 1. Following his loss to Lombard, the UFC announced that Palhares tested positive for elevated testosterone levels in his post-fight drug test and, subsequently, has been suspended for nine-months retroactive to December 14.


title: Rousimar Palhares

text: Following his loss to Lombard, Palhares stated that he would be moving down one weight class to the welterweight division. He made his debut in the new division against Mike Pierce on October 9, 2013, at UFC Fight Night 29. He won the fight via heel hook submission just 31 seconds into the first round. This was the only successful submission throughout the event. However, Palhares was denied a Submission of the Night bonus because he continued cranking the heel hook after the referee stepped in, an act UFC deemed "unsportsmanlike conduct." It was also noted that Pierce tapped a total of eight times to no response from Palhares. The next day, while conducting an interview with ESPN's Jeremy Schaap, UFC president Dana White announced that the UFC was releasing Palhares effective immediately due to not letting go of the submission. Hours later, UFC and Zuffa released a statement saying that Palhares was already in trouble for his failure to release his heel hook on Drwal in 2010 and his drug suspension in 2012, and his actions the night before were the last straw.


title: Rousimar Palhares

text: In November 2013, Palhares signed a contract with World Series of Fighting, but was already on thin ice as WSOF president Ray Sefo had given Palhares a very stern warning about in-cage conduct.


title: Rousimar Palhares

text: Palhares made his WSOF debut at WSOF 9 against the reigning Welterweight Champion Steve Carl. He won via inverted heel hook submission in the first round to win the WSOF Welterweight Championship.


title: Rousimar Palhares

text: In July, he was scheduled to fight Jon Fitch at WSOF 11. However, on April 30, 2014, the match was canceled. The fight with Jon Fitch was rescheduled for WSOF 16 on December 13, 2014. Palhares successfully defended his title, winning by kneebar only 90 seconds into first round. Again the length of the submission hold came into question.


title: Rousimar Palhares

text: Palhares faced Jake Shields on August 1, 2015, at . Shields did well against Palhares for the majority of the fight, but the tables began to turn in the 2nd round with a takedown by Palhares and the subsequent damage Palhares did on the ground. In the 3rd round, Palhares submitted Shields, but faced penalty from the NSAC soon after for once again holding on to a submission after being prompted to let it go by the referee, and for repeatedly eye-gouging Shields. Palhares came to the press one day after the incident and claimed innocence.


title: Rousimar Palhares

text: Following the incident, Palhares was stripped of his welterweight title and suspended indefinitely, with WSOF vice-president Ali Abdel-Aziz saying that Palhares "has mental problems and shouldn’t be allowed to fight until he fixes them."


title: Rousimar Palhares

text: After the release from the WSOF, Palhares compiled a record of 1–4–1 in Italian, Polish and Russian promotions, losing two championship fights in the process.


title: Rousimar Palhares

text: On July 28, 2020, it was announced that Palhares had signed a contract with Taura MMA. Initially, he was expected to make his promotional debut against Sean Loeffler at Taura MMA 11 on October 30, 2020. However, on September 8, 2020, news surfaced that the bout was rescheduled to take place at Taura MMA 10 on October 23, 2020. Reports surfaced in the week leading up to this fight that Loeffler was forced to withdraw and was quickly replaced with Anthony Gordillo instead. In turn, Gordillo was not able to leave his hometown due to COVID-19 restrictions and the bout was cancelled.