Re: [dd] DBOUND scope

[John Levine <[e-mail]>]

It appears that Ben Schwartz  <[e-mail]> said:
>-=-=-=-=-=-
>I saw a few concerns in Zulip today about whether the DBOUND-like work is addressable by any​ technical solution.  I think it is.  Additionally, I think:

I wold bet money that it is not.

>Some browsers today show only the "registrable domain" in the title bar, to minimize user confusion.  This is sometimes the second-level domain, but
>not always (e.g. for co.uk).  There are also some other contexts in which the "registrable domain" is a valuable concept (e.g. rate limits for PKI
>certificate issuance, like Let's Encrypt [1]).

Yes, those are some of the things that they use the PSL for.

>A DELEG flag meaning "this delegation is from a registry" would be useful to help clients identify the "registrable domain".  For browser use, this
>would require some additional protocol work, to accumulate relevant DELEG metadata and pass it back to the stub in EDNS.

Where would this appear in www.example.com? Or widget.sales.example.com? The way you use the PSL is to walk up the
tree until you find the boundary. Or are you saying your cache will do
this tree walk for you and put the results in the EDNS?  Yuck.

>It's true that further delegations down the tree could set the "registry" flag disingenuously.  That's not a problem: the client is only interested
>in the "topmost registrable domain", and would ignore any indications from further down the tree.

If you look at the PSL, that doesn't work. There are real cases like
uk.com where there is one registry underneath another. It is not a bug
that the entries in the PSL are manually reviewed to see that they're
plausible.

This is hard.  Let's not get DELEG stuck in this swamp of a side show.

R's,
John