Re: [dbound] Suggestion for Prague: let's try to converge on problem(s)

["John Levine" <[e-mail]>]

>In my reading, draft-deccio-domain-name-relationships-00 starts with a
>deep, fundamental division between "public" and (for want of a better
>term) "private" domain names.  I think it starts there because the
>authors genuinely believe that the distinction is a fundamental one.

I share your concern and agree with the implication this jumps to
places we don't necessarily want to be.  It seems to me more useful
to look at the questions are currently answering using the PSL, and
the kinds of answers:

* Should I accept a cookie at this name?  (domain -> yes/no)

* Should I sign an SSL cert at this name? (domain -> yes/no)

* Should I sign a wildcard SSL cert under this name? (domain -> yes/no)

* Where is the DMARC record for this name? (domain -> domain)

* Are these two names under the same control? (domain x domain -> yes/no)

The fact that the questions and answers aren't even all of the same
type should offer a hint that the structure is more complicated.

R's,
John