[dbound] DBOUND and paths forward

"Murray S. Kucherawy" <superuser@gmail.com> Tue, 24 May 2016 00:54 UTC

Return-Path: <superuser@gmail.com>
X-Original-To: dbound@ietfa.amsl.com
Delivered-To: dbound@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id C8F1612DBB7 for <dbound@ietfa.amsl.com>; Mon, 23 May 2016 17:54:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id cssX_R6i_HYv for <dbound@ietfa.amsl.com>; Mon, 23 May 2016 17:54:17 -0700 (PDT)
Received: from mail-yw0-x243.google.com (mail-yw0-x243.google.com [IPv6:2607:f8b0:4002:c05::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A2AC812DB53 for <dbound@ietf.org>; Mon, 23 May 2016 17:54:17 -0700 (PDT)
Received: by mail-yw0-x243.google.com with SMTP id l126so272358ywe.3 for <dbound@ietf.org>; Mon, 23 May 2016 17:54:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=tEsrXoQxfOePn8u/y2S0RgcLMTLqKrukWURKpua6gsg=; b=Et5puiywkRz1IrS2P7QJUBZ0g4sLF/j2N3hBL6bwJoXWJGCKKMEnU1B7BjxOWENCuY Rt4wj8P40oDfqGzIaw2Lp5SiNaxOb7U+g91BWA3FduTLegra5VlSsQ1njTYmFI4spQ05 ygQaVmHNaLEqzXDI8RCYdLPiTVgzVo+uMUPlmQTuveWgznUOFxs5yRr7tYo3/ymXWqdG RJ4xgwfgNXCTfXXD1LANJhCNK1o7Zu6prTS9NHEZk+E0OtU8L8+ebXJ9rdLYgLITq1T+ l+m9W1gspmYBYXbiQpItBEjRzIFZoaQoPd0NQL7UJEaeIuyUavUqIR78W63n6WXjUQLj b5xg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=tEsrXoQxfOePn8u/y2S0RgcLMTLqKrukWURKpua6gsg=; b=H3iN8Un5Wt8DzcvHyjAvPAu9Vtqs5WOOrl3PLIKrJwrOfgMEPx8k95jviLuXYUYTMK AFxcV+caF8/J6kMlRW/jtFNNIyLkHCPsqRJZy/nEB5GDn5t/ELlmwwNDrsXBbxSkRxWw uisRlbLDOYJmcRLKJnIiZimMjMieF1w5rlcjiVtNyguzaxGhShSrBsJ2zfUzDAfYrl68 zVqTbYvcQT1LrN7MywwwUkEpV9hhCVUe2mSQVpm2kTItr2XVvfcNFBDfjHOeYnawGzYN 5JYu8PKuoybXtSbhGKgj76oQQoAll1eQBkeyoPTpeX+pKaRFNrdgTsGCAPATGVyj/kT2 IkhA==
X-Gm-Message-State: ALyK8tJEwF+4ru3MSNtYb7XoOma6qW3VFs+bVz5ur/jDHino/AEClV50M8TxoawIq4JGVqQYeQmNsR1bIrnHqA==
MIME-Version: 1.0
X-Received: by with SMTP id q190mr1062021ywf.319.1464051256835; Mon, 23 May 2016 17:54:16 -0700 (PDT)
Received: by with HTTP; Mon, 23 May 2016 17:54:16 -0700 (PDT)
Date: Mon, 23 May 2016 17:54:16 -0700
Message-ID: <CAL0qLwbeWRLd8tF045xYn00FLH3Dm1u=DR3-Gjb7oot+GYEr6Q@mail.gmail.com>
From: "Murray S. Kucherawy" <superuser@gmail.com>
To: "dbound@ietf.org" <dbound@ietf.org>
Content-Type: multipart/alternative; boundary="94eb2c03381018c88c05338bff04"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dbound/uL5vpEhp0p7B4c3ZLZIx-zE4J1s>
Subject: [dbound] DBOUND and paths forward
X-BeenThere: dbound@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: DNS tree bounds <dbound.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dbound>, <mailto:dbound-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dbound/>
List-Post: <mailto:dbound@ietf.org>
List-Help: <mailto:dbound-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dbound>, <mailto:dbound-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 May 2016 00:54:20 -0000


At IETF 95, the DBOUND co-chairs met informally with the authors of the
documents we've had under consideration for some time.  Predictably, the
topic was about if, or how, we move forward from here.  Rest assured that
no decisions were made, as those must be made by the working group in an
approved way (e.g., this list).  However, we do have some results to share
with the group, and gauge where consensus is on our next steps.

We believe we are entrenched in a battle to solve two problems
simultaneously.  Our charter compels us to try our best to do this, and
we've put admirable amounts of thought into it.  Ultimately, however, if
such a grand unified solution does exist that the community will adopt, its
time has apparently not yet come.

This leaves us with a couple of choices.  We can produce independent
solutions for our various use cases -- the two primary ones being the one
driven by the email community that wants a way to do policy lookups without
the perceived problems of the maintenance of the Public Suffix List, and
the web security one having to do with which cookies apply to which sites.
We can choose to work on only a subset of these.  Or we can admit defeat
and dissolve the working group, having sadly accomplished nothing.

The small pseudo design team observed that it appears as though there is
actually only one community likely to implement our solutions in the short
term, and that is the email community.  We perceive it to be unlikely that
a solution produced by this working group for the web security issue would
be adopted in short order by any of the browser producers.  They simply
have not expressed a desire to contribute and adopt, or even concur that
there's a serious problem that needs to be solved.  In contrast, the email
community (in particular the DMARC folks) will apparently be thrilled to
adapt their specifications and implementations to the output of this
working group, even experimentally, out of their concerns regarding the
upkeep of the PSL and its impact on their ability to provide timely, safe

With that in mind, your co-chairs propose that we abandon any grand unified
theory of domain boundary evaluation and focus only on this email use
case.  If there is a change of heart from other communities, or some
unifying idea does appear, we can re-evaluate our options at that time.
However, in the interests of being productive toward our original goals, we
propose to assume that is not the case and will not be in the near future.

So, what say you all?

-Pete & Murray, your DBOUND co-chairs