Re: [apps-discuss] "finding registered domains"

Andrew Sullivan <ajs@anvilwalrusden.com> Mon, 11 March 2013 21:09 UTC

Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64EE621F8E63 for <apps-discuss@ietfa.amsl.com>; Mon, 11 Mar 2013 14:09:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.813
X-Spam-Level:
X-Spam-Status: No, score=-0.813 tagged_above=-999 required=5 tests=[AWL=0.027, BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VDFW7exfjFOY for <apps-discuss@ietfa.amsl.com>; Mon, 11 Mar 2013 14:09:42 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id ABE8A21F8E17 for <apps-discuss@ietf.org>; Mon, 11 Mar 2013 14:09:29 -0700 (PDT)
Received: from mx1.yitter.info (dhcp-2430.meeting.ietf.org [130.129.36.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id D26578A031 for <apps-discuss@ietf.org>; Mon, 11 Mar 2013 21:09:28 +0000 (UTC)
Date: Mon, 11 Mar 2013 17:08:57 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: apps-discuss@ietf.org
Message-ID: <20130311210857.GG38441@mx1.yitter.info>
References: <20130310042250.GE33497@mx1.yitter.info> <7B65185F-2517-4800-AE6A-CBA88F8B5720@vpnc.org> <CAL0qLwaGY0TYOndAUgbVYG5qDKKfP2U5Wuc5+oBXgyJ_kz9wSg@mail.gmail.com> <CAL0qLwYq1bgUykCfPQz7tvMBsxyfXSyBDTQQp=VQPu=74v_G0w@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CAL0qLwYq1bgUykCfPQz7tvMBsxyfXSyBDTQQp=VQPu=74v_G0w@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [apps-discuss] "finding registered domains"
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Mar 2013 21:09:43 -0000

On Mon, Mar 11, 2013 at 04:23:25PM -0400, Murray S. Kucherawy wrote:
> 
> I'd like to understand how these are related, or instead how they are
> actually totally different problem spaces.  I think this is important to
> figuring out a path forward.

In my opinion, these are in fact the very same problem, just with
different expressions.

At bottom, the issue is always that there is an attempt to read from
the hierarchical delegation space of the DNS some sort of
administrative commonality that just doesn't exist.  

In general, domain names just represent the labels of every node down
the DNS tree from the root zone.  So, the name
label1.label2.label3.example.com. names several levels of the DNS
tree.  And labelA.labelB.labelC.example.com. also names several levels
of the DNS tree.

What we _cannot_ tell from any of that is who is in control of which
parts.  This is true regardless of whether there are any delegations
(SOA records) in the tree anywhere along that FQDN.  You can tell that
example.com in both FQDNs are under the same control (because they're
the same node), but you can't tell whether example.com is controlled
by the same people who control .com (compare this with the co.uk/.uk
case).  Similarly, you cannot tell whether
labelA.labelB.labelC.example.com. is controlled by the people who
control example.com (compare this to web hotels, for instance, which
have of course mostly fallen out of fashion for this reason).  There
are some historically good pretty good rules of thumb, but that's all
they are.

The "cookies problem" is just a special case: the cookies spec had
peculiar rules about TLDs, and now has some special handling of
sibling and children relationships, but it's still both too broad and
too narrow.

Does this help?

Best,

A

-- 
Andrew Sullivan
ajs@anvilwalrusden.com