Re: [dbound] Requirements for administrative boundary data sources?

Jeffrey Walton <noloader@gmail.com> Tue, 12 April 2016 22:16 UTC

Return-Path: <noloader@gmail.com>
X-Original-To: dbound@ietfa.amsl.com
Delivered-To: dbound@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D0EA12DADE for <dbound@ietfa.amsl.com>; Tue, 12 Apr 2016 15:16:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FYVv21H1dihg for <dbound@ietfa.amsl.com>; Tue, 12 Apr 2016 15:16:37 -0700 (PDT)
Received: from mail-ig0-x231.google.com (mail-ig0-x231.google.com [IPv6:2607:f8b0:4001:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A979F12D9D1 for <dbound@ietf.org>; Tue, 12 Apr 2016 15:16:37 -0700 (PDT)
Received: by mail-ig0-x231.google.com with SMTP id kb1so118706371igb.0 for <dbound@ietf.org>; Tue, 12 Apr 2016 15:16:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:reply-to:in-reply-to:references:date:message-id :subject:from:to:cc; bh=t8bPkFl+wxOryqCaklyHy6VilBGJ1rXfWpED774pT6E=; b=cin0oWICxsOQWObf7X4yGkb4hb/N5zhA1eyayxKFEYjWCx5Lu7WzqBOHKQOG8w7rWT i+QUqbpPKQVQECKVqJ1q0qmt/MU9t+Q1n+W/092XprA9hh0QuWIsSLxsn0LThLZeXqaN NWE0Z9l/8UWsAayipuZpuUeVWfI6rk5JtFDm6aKLoN0lgT6XHJ3t6MFPB0vH8vsVve34 tZtxX+kn3T/pznsB3eR0bVUiN1fWzMlhyCxe0itVLwZpnlJ2wM++Eb53sbquldor7IzF 8sw4+OCs2FiadK8YWpUQxfMP2CleCfUZcEnbr3WQ4FADFaeDL52Vnddpyna8Ju3jWOGX kX0Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:reply-to:in-reply-to:references :date:message-id:subject:from:to:cc; bh=t8bPkFl+wxOryqCaklyHy6VilBGJ1rXfWpED774pT6E=; b=IWCfF6h2MJKUSvE0t/Q8P2SU/VXQuku5qAkWEZKxpOqOSJ39bVOHOM1l27WlDTcSju 9wiVJtQEomvIILxBlsKa0/CJt7Oh+MjfTQ31udA8vuZYHYS5qW4KxtrAWFfIqj4Kjd1e TktYEd6Abwtc63xpjVyfmPMWBFeIJqczIvqJiYEwtt79izf8irzvyzzVmC3BksmP9sl6 sTi2lVvOLtPCk/q6ghB3/BfO7z/3Ci9mdsah2c5xJ/2tMA6FjAzy3YOpGYZN8FoVIJDT 9mA0/5pxfSXpIYbcmjTPxR0lmeh+SSeDWUfRdAa9yoA3kieCEAYa4LYVg3RtZJhnJO+0 fnoQ==
X-Gm-Message-State: AD7BkJJLsi0IIPvFMTomI/OI+iAj1aGH/PEY1naHaxAddgrYGQiqRxogCs0ZeD6unuhY6xUMWlYg//mBax4rpQ==
MIME-Version: 1.0
X-Received: by 10.50.83.40 with SMTP id n8mr26460388igy.23.1460499396808; Tue, 12 Apr 2016 15:16:36 -0700 (PDT)
Received: by 10.36.193.133 with HTTP; Tue, 12 Apr 2016 15:16:36 -0700 (PDT)
In-Reply-To: <CAGrS0F+2865MUFVn=7S=oOzxmVu5V8rqKn2YOHO5ihq4x4FsmQ@mail.gmail.com>
References: <CAH8yC8maLvy34_visC3XvvUcxSBUD50ZFq6NQ4rV7Fve-=rHGA@mail.gmail.com> <570B5E12.6030909@it.aoyama.ac.jp> <CAH8yC8mwh0ddwu3MXdvJ9_JEccmcVx8F+tLi4ckps9Ru-ExaQw@mail.gmail.com> <8B580AD0-E10D-42C5-8806-AFA5291FD29D@vpnc.org> <CAGrS0F+2865MUFVn=7S=oOzxmVu5V8rqKn2YOHO5ihq4x4FsmQ@mail.gmail.com>
Date: Tue, 12 Apr 2016 18:16:36 -0400
Message-ID: <CAH8yC8kJwauQ9Y5ym_4cMfnwfWFgjqJptZ-GfcgvjpycOY8iFA@mail.gmail.com>
From: Jeffrey Walton <noloader@gmail.com>
To: Jothan Frakes <jothan@jothan.com>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dbound/FAWTLGo0-VxpvoHpaLFX1_7ageQ>
Cc: Paul Hoffman <paul.hoffman@vpnc.org>, "dbound@ietf.org" <dbound@ietf.org>
Subject: Re: [dbound] Requirements for administrative boundary data sources?
X-BeenThere: dbound@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: noloader@gmail.com
List-Id: DNS tree bounds <dbound.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dbound>, <mailto:dbound-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dbound/>
List-Post: <mailto:dbound@ietf.org>
List-Help: <mailto:dbound-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dbound>, <mailto:dbound-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Apr 2016 22:16:39 -0000

On Tue, Apr 12, 2016 at 3:45 PM, Jothan Frakes <jothan@jothan.com> wrote:
>>
>> As Martin points out, the most logical way for the owner of zone to say
>> the zone's policy is in that zone or a child of the zone. To me, that's the
>> most important part of the DBOUND work.
>>
> +1 also
>
> As one of the contributing volunteers on PSL I can say this is important to
> us as well - that these policies be defined by the registry for 'top down'
> TLDs that come from IANA delegation (we follow ICP-3 - one authoritative
> root).  Some of the biggest challenges that the volunteers have are A]
> multiple, conflicting requests from the same registry, B] ensuring requests
> are from the authorized source, and C] if a request comes from a third party
> - validating the request with the authorized source.  Having this done in
> the DNS zone would eliminate all three issues for us within the IANA chain.
>
> That said, we also recommend any solution be designed to not discriminate,
> nor have any opinion on innovation below that, such as done by Amazon,
> Microsoft, Google, Github, Centralnic, Dyn or the many others who subdomain
> or what they do - and encourage that if there is a top-down solution that it
> not introduce burdens, walls. fees or gates where such innovation might
> require blessing of the parent in some form.
>
> We record changes the balance between these by maintaining two sections
> within PSL, "Public" and "Private", respectively, as described above.

Thanks.

Forgive my ignorance, but has a centralized vs decentralized model
been decided upon?

Jeff