Re: [Add] some background on split DNS with DNSSEC

Joe Abley <jabley@hopcount.ca> Tue, 09 November 2021 14:32 UTC

Return-Path: <jabley@hopcount.ca>
X-Original-To: add@ietfa.amsl.com
Delivered-To: add@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D52DE3A0D6E for <add@ietfa.amsl.com>; Tue, 9 Nov 2021 06:32:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=hopcount.ca
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3KGtLiH5R-Os for <add@ietfa.amsl.com>; Tue, 9 Nov 2021 06:32:47 -0800 (PST)
Received: from mail-qt1-x832.google.com (mail-qt1-x832.google.com [IPv6:2607:f8b0:4864:20::832]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8490D3A0D66 for <add@ietf.org>; Tue, 9 Nov 2021 06:32:47 -0800 (PST)
Received: by mail-qt1-x832.google.com with SMTP id p19so2842947qtw.12 for <add@ietf.org>; Tue, 09 Nov 2021 06:32:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hopcount.ca; s=google; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=Hhm9hNF7OFt/HNPc+Rb72rwYxT093QzfB/RyuCBKpu0=; b=kUrtYoNoIRWUKBbQd6lvuU4lq+B/vNFR8bWnASvUgx70g2l1x6Tm0oo6ja7GAAIV9n qD4bEQYVAEQs62OhAkUopo9cMMJzMwT+n3Qaq2mvSC45GJLRmBaeUgGLSqvAzmGt+rSG WQfHbct1BHOtJR7zpXwPyT8d2Rc++T44Ll7Ak=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=Hhm9hNF7OFt/HNPc+Rb72rwYxT093QzfB/RyuCBKpu0=; b=e9+4r6KsOeuO1y3sl4JnwjQhT17I3bUmWUucqpIwxy5EVC6ORRVygej2da5NtOow/V eebO5I7BDnfMqXUw+ge0L8N56PbaU6qX5gItY2sRq2K7ElzOhHx2qvKjB7N9E/O6ggxA F2CEMg40/VSR+Gg2BmiPCoyh37c53gL8jDkFaNqyUjt1E22duiTY/zMzeTgmfccGYcmm H0L/gaQH/Yq036KVMmcwyGtnZGX3qVCuR0W5Ad/yOipst8631WnwABEfyoeC4+47V/WB J9nY58cLsCz/cY+2PvYM2MSstEpyIYSjcl3K33O00fbdyheMW+ufHFj36+aQWdu5M3ym Swmw==
X-Gm-Message-State: AOAM530GSzxo1NCzTn6sqjutSVuaKxnTrNmTDMxALoQZezJ25rrZ/8Hw NPwgNIcAMTKVgCaGRRGZ+55atZxjA7gzi5yN
X-Google-Smtp-Source: ABdhPJyTBkC8sP8KSARBbl1MBDTdS/xygyoUF/0Es3As2btzSd1bOsc2WqcPVLys0vyZrHyz7ryy0g==
X-Received: by 2002:a05:622a:14a:: with SMTP id v10mr8975512qtw.36.1636468365642; Tue, 09 Nov 2021 06:32:45 -0800 (PST)
Received: from smtpclient.apple ([2607:f2c0:e784:c7:7135:fce0:9ebd:9f17]) by smtp.gmail.com with ESMTPSA id g5sm5660795qtb.96.2021.11.09.06.32.44 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 09 Nov 2021 06:32:45 -0800 (PST)
Content-Type: multipart/alternative; boundary="Apple-Mail-C8F5A033-AF8E-47B0-A452-37C60B807451"
Content-Transfer-Encoding: 7bit
From: Joe Abley <jabley@hopcount.ca>
Mime-Version: 1.0 (1.0)
Date: Tue, 09 Nov 2021 09:32:44 -0500
Message-Id: <75F9E5CA-F12F-40B7-AE4A-813A0DEAC662@hopcount.ca>
References: <CAHbrMsAEM=HVDf6sg2YW+cvv37XjnxGs7DNq0ja+HzE2=+9+=w@mail.gmail.com>
Cc: Michael Richardson <mcr+ietf@sandelman.ca>, add@ietf.org, Wes Hardaker <wjhns1@hardakers.net>
In-Reply-To: <CAHbrMsAEM=HVDf6sg2YW+cvv37XjnxGs7DNq0ja+HzE2=+9+=w@mail.gmail.com>
To: Ben Schwartz <bemasc=40google.com@dmarc.ietf.org>
X-Mailer: iPad Mail (19B74)
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/Cg1M9L1dlASQpcqglT4SNZFwgDc>
Subject: Re: [Add] some background on split DNS with DNSSEC
X-BeenThere: add@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications Doing DNS <add.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/add>, <mailto:add-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/add/>
List-Post: <mailto:add@ietf.org>
List-Help: <mailto:add-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/add>, <mailto:add-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Nov 2021 14:32:54 -0000

On Nov 9, 2021, at 09:29, Ben Schwartz <bemasc=40google.com@dmarc.ietf.org> wrote:

> On Tue, Nov 9, 2021 at 8:45 AM Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> 
>> A private delegation of "internal.example.com" works much better,
>> particularly in the modern world of IPv6, VPNs, and Remote Access.
> 
> What is a private delegation?

I am not Michael Richardson, but I think what is intended is a delegation within a restricted ("private") namespace, such as might be exposed through internal resolver infrastructure that serves a specific set of stub resolvers.

But I agree that it's not a very clear term.


Joe