Re: [Dbound] Draft problem statement and IETF "bar BoF"

Casey Deccio <casey@deccio.net> Wed, 05 November 2014 18:29 UTC

Return-Path: <casey@deccio.net>
X-Original-To: dbound@ietfa.amsl.com
Delivered-To: dbound@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C92D1A9104 for <dbound@ietfa.amsl.com>; Wed, 5 Nov 2014 10:29:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.378
X-Spam-Level:
X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mN-emc0aZc7P for <dbound@ietfa.amsl.com>; Wed, 5 Nov 2014 10:29:35 -0800 (PST)
Received: from mail-ig0-x22d.google.com (mail-ig0-x22d.google.com [IPv6:2607:f8b0:4001:c05::22d]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 329971A910E for <dbound@ietf.org>; Wed, 5 Nov 2014 10:29:32 -0800 (PST)
Received: by mail-ig0-f173.google.com with SMTP id r10so9277605igi.0 for <dbound@ietf.org>; Wed, 05 Nov 2014 10:29:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=deccio.net; s=google; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=pl2Ub6EtXsOV2k/xaZFlKK/RRh25OhXYlhLk49n0wK4=; b=DbzLcNiF/TvSPMmjTfAYmQG48Yu8iMtW38dH688FZkWIhm8G/UO1S0RvhOBiuJN5sQ N+owpIEau2+gi21wb29o6oaWIF4jvh3b9rdjLHQ9FEs2uw05TrqvxBYVnQ/axXz21IBS nlY9VA4eZgsgts3oEk4ykgE617wYUibflAXFA=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=pl2Ub6EtXsOV2k/xaZFlKK/RRh25OhXYlhLk49n0wK4=; b=gNpSc1+s70+lo8sfB/4vYAcMuigu6liqrRN0mPRBBhQnUAtqWbIqY3R72rx5XpWTkg Kfnnv6o/j7f0IZU9ycTOYaILaj3w8IRWpQayDxBgT5O4DZG6TFDw2BWPBOV51c+p+U+8 ksAf8yN6BWCwoqeKYzeZQzfFdErTFqxmEVxXG958CFh4W+NjqX/SOl/V2BT5hnGKR5Gi /+2h2KYsp1VrtWykGYo2AK6edLn+EsOpT4PHcMnCX/J51e4nrLNFZa1ocwhyKzSxX0px vJENMnMg+pVqTFTeMIW6eURJ+PFKndbEVzNT/EjAHLuBs4FkTNx/jzKXpHq5/cdj5XOb Vgyw==
X-Gm-Message-State: ALoCoQm/5AFdOUPKCLtUR+eLgFwwPtRzstUCcW40GGWoBiICSKWmHjePhEiAlpVAVrf2sE7wHuJS
MIME-Version: 1.0
X-Received: by 10.107.11.129 with SMTP id 1mr64179845iol.18.1415212171339; Wed, 05 Nov 2014 10:29:31 -0800 (PST)
Received: by 10.50.251.178 with HTTP; Wed, 5 Nov 2014 10:29:31 -0800 (PST)
In-Reply-To: <20141105163627.GL30379@mx1.yitter.info>
References: <CAEKtLiSxWgt2NV2r1aYcLJLJqLcVS1-+u+cOFrnaH6Mph98SzA@mail.gmail.com> <D07E8E77.5405%edward.lewis@icann.org> <CAEKtLiSJ2admBwMcoQum4LHjTQr252S9+XrJbhOkGLNkS-Q4wg@mail.gmail.com> <D07F986D.544A%edward.lewis@icann.org> <20141105143630.GD30379@mx1.yitter.info> <CAEKtLiR+_tL0xvX-SXi2p7YxeaskSgwZb9_RZRF45mKS0aFHXQ@mail.gmail.com> <20141105163627.GL30379@mx1.yitter.info>
Date: Wed, 05 Nov 2014 13:29:31 -0500
Message-ID: <CAEKtLiTXP5yfbX4=Lk5oj7JejHBCa_4y_8ZA9gvxT6QUNvyYdw@mail.gmail.com>
From: Casey Deccio <casey@deccio.net>
To: Andrew Sullivan <ajs@anvilwalrusden.com>
Content-Type: multipart/alternative; boundary="001a113de586c16bea050720c22a"
Archived-At: http://mailarchive.ietf.org/arch/msg/dbound/Ks2AYBjkp22g9YELjj5LRQvc1Qc
Cc: "dbound@ietf.org" <dbound@ietf.org>
Subject: Re: [Dbound] Draft problem statement and IETF "bar BoF"
X-BeenThere: dbound@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS tree bounds <dbound.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dbound>, <mailto:dbound-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dbound/>
List-Post: <mailto:dbound@ietf.org>
List-Help: <mailto:dbound-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dbound>, <mailto:dbound-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Nov 2014 18:29:37 -0000

On Wed, Nov 5, 2014 at 11:36 AM, Andrew Sullivan <ajs@anvilwalrusden.com>
wrote:

> On Wed, Nov 05, 2014 at 10:58:39AM -0500, Casey Deccio wrote:
>
> > identification.  I don't think there is a question about whether or not
> > there so-called public/private boundaries currently exist in the domain
> > space.
>
> Actually, this is to me precisely the question.  I have been arguing
> that the public/private distinction is actually a miscategorization of
> the problem.  It's a good rule of thumb in lots of cases, but the
> corners where the distinction breaks down are instructive.
>

My feeling is that the problems with miscategorization are often because
this categorization is the *only* one that has been used predominantly
(outside of simple ancestral relationships), not because there aren't such
things as public/private boundaries.

Or... The misuse of a hammer does not mean that we need to reevaluate
whether striking it on nails is appropriate.  Rather, it means that we need
to reevaluate the uses of the hammer and the goals that we are trying to
accomplish with it.


>
> For instance, some universities have delegated name spaces to
> departments.  Is this a public registry, or a private one?  Well,
> neither, exactly.  In some sense, this is a delegation across
> organization boundaries, and the policies in one are most assuredly
> not the policies in another.  In some other sense, they're all part of
> the same legal entity.  Similarly, I really don't think it is a good
> thing if information leaks between different government departments,
> yet in some sense everything under gc.ca is in the same organization.
> Or anyway, Stephen Harper wishes it were.
>
> These cases show that the public/private distinction is not actually
> clean enough.
>

The draft problem statement document distributed to the list describes
public/private boundaries as only one property of domains.  It also
considers (for example) intra-scope relationships, and provides an example
nearly identical to the one you provided above (see section 1.1.4).

I am not arguing that public/private boundaries are *the* way to solve
things, nor am I suggesting that the definition of "public" is sufficiently
clear, as currently defined.  But to me there there is an apparent
distinction between a delegation from, say, "org" to "foo.org" and a
delegation from "foo.edu" to "cs.foo.edu".  In the proposal that would be
the difference between "public -> private" and "private -> private".
Inferring more than that is currently undefined and is referred to in the
third bullet of the problem statement (section 4).

Cheers,
Casey