Re: [dd] [Ext] starting charter text for the DELEG BOF discussion

Paul Hoffman <paul.hoffman@icann.org> Tue, 05 March 2024 15:24 UTC

Return-Path: <paul.hoffman@icann.org>
X-Original-To: dd@ietfa.amsl.com
Delivered-To: dd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3777CC151076 for <dd@ietfa.amsl.com>; Tue, 5 Mar 2024 07:24:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ky06HXEWK4E8 for <dd@ietfa.amsl.com>; Tue, 5 Mar 2024 07:24:32 -0800 (PST)
Received: from ppa4.dc.icann.org (ppa4.dc.icann.org [192.0.46.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BDD4C14CF18 for <dd@ietf.org>; Tue, 5 Mar 2024 07:24:32 -0800 (PST)
Received: from MBX112-W2-CO-2.pexch112.icann.org (out.mail.icann.org [64.78.33.6]) by ppa4.dc.icann.org (8.17.1.24/8.17.1.24) with ESMTPS id 425FOOtq019873 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <dd@ietf.org>; Tue, 5 Mar 2024 07:24:24 -0800
Received: from MBX112-W2-CO-1.pexch112.icann.org (10.226.41.128) by MBX112-W2-CO-2.pexch112.icann.org (10.226.41.130) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.28; Tue, 5 Mar 2024 07:24:27 -0800
Received: from MBX112-W2-CO-1.pexch112.icann.org ([169.254.44.235]) by MBX112-W2-CO-1.pexch112.icann.org ([169.254.44.235]) with mapi id 15.02.1258.028; Tue, 5 Mar 2024 07:24:27 -0800
From: Paul Hoffman <paul.hoffman@icann.org>
To: "dd@ietf.org" <dd@ietf.org>
Thread-Topic: [Ext] [dd] starting charter text for the DELEG BOF discussion
Thread-Index: AQHabOHOdAP5paU5sUOmz5kiMldRV7EpzsSA
Date: Tue, 05 Mar 2024 15:24:27 +0000
Message-ID: <648F1AEE-1D86-449D-90C9-71E39FEBA6D0@icann.org>
References: <yblbk7wl65k.fsf@wx.hardakers.net>
In-Reply-To: <yblbk7wl65k.fsf@wx.hardakers.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [192.0.32.234]
x-source-routing-agent: True
Content-Type: text/plain; charset="us-ascii"
Content-ID: <C6D5A32CFFE8B84A93B6D6A487FF8B2C@pexch112.icann.org>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-03-05_12,2024-03-05_01,2023-05-22_02
Archived-At: <https://mailarchive.ietf.org/arch/msg/dd/Jx8nAR8eWY7bdi3Sq5aphLqCMPQ>
Subject: Re: [dd] [Ext] starting charter text for the DELEG BOF discussion
X-BeenThere: dd@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: DNS Delegation <dd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dd>, <mailto:dd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dd/>
List-Post: <mailto:dd@ietf.org>
List-Help: <mailto:dd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dd>, <mailto:dd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Mar 2024 15:24:33 -0000

Just a nudge from your BoF co-chair: Please review the charter that Wes posted and comment, even if just to say "looks fine". Having this discussion on the mailing list before the BoF meeting in a few weeks will help clarify people's positions and make the meeting more useful.

--Paul Hoffman

On Mar 2, 2024, at 12:39, Wes Hardaker <wjhns1@hardakers.net> wrote:
> 
> 
> Greetings all,
> 
> Your BOF chairs have worked on starting text for a potential charter based on the discussions to date.  Clearly, this is starting text and deserves discussion both on the list and in the BOF. We look forward to the upcoming BOF and from hearing from everyone's opinions on this starting point for a charter.
> 
> ----------
> 
> 
> # Background and Problem Space
> 
> The DNS protocol has traditionally had limited ability to signal to recursive resolvers about the capabilities of authoritative servers they communicate with.
> In part, this stems from the inability of parents (often registries) to specify additional information about child delegations (often registrants) beyond NS, DS, and glue records.
> Further complicating matters is the inability of a registrant to signal that the operation of a delegation point is being outsourced to a different operator, leaving a challenge when operators need to update parental information that is only in the control of the child.
> A significant issue in today's deployed DNS that derives from these issues is data often being out of synchronization between parents and children. Said another way, children often have more up-to-date information about the nameservers and DNSSEC keying information than their parents due to slowness, or complete lack, of automated child-to-parent updates.
> 
> The Internet's dependence on the DNS as a critical starting point for most communication has resulted in the development of a complex ecosystem that consists of many different parties, business relationships, and software packages.
> Software deployments exist in environments that range from small CPE devices and software packages to entire clusters of world-wide distributed server platforms.
> 
> # Objective and Scope
> 
> To address these challenges, the working group will first develop the requirements for adding a new signaling mechanism that allows parents to return DNS delegation information to resolvers.
> 
> The working group will also list the other types of information not available today that might be be provided over a designed signaling mechanism.
> 
> The working group will then define the semantics of a new signaling mechanism, taking future extensibility into account.
> 
> The first use case for this DNS delegation signalling mechanism is expected to be delegation aliasing, where the parent returns a pointer to service provider that will then return the needed delegation information.
> This use case has been discussed for many years in the DNSOP and other Working Groups.
> 
> The working group will only specify extensions to the DNS protocol that relate to delegation.
> 
> # Deliverables
> 
> - A document listing the consensus-derived requirements for a new signaling mechanism between a parent and a resolver about communication parameters available for communicating with a delegated child.
> This need not be published as an RFC and may remain as an Internet-draft.
> 
> - A document listing, and ideally prioritizing, new delegation attributes to be distributed from parents that would benefit resolver and child communications.
> This need not be published as an RFC and may remain as an Internet-draft.
> 
> - A specification defining the new delegation attribute signaling mechanism.
> This is expected to become a standards-track RFC.
> 
> - A specification for how to use the new delegation attribute signaling mechanism to perform aliasing for delegation.
> This is expected to become a standards-track RFC.