RE: [dhcwg] Trust model of Client FQDN option

Hi:

Ok, perhaps that title of the draft isn't the greatest, but see section
6.3.1:

6.3.1  Initial DHCID RR Query

   When a DHCP client or server intends to update an A RR, it performs a
   DNS query with QNAME of the target name and with QTYPE of DHCID.

   If the query returns NXDOMAIN, the updater can conclude that the name
   is not in use and proceeds to Section 6.3.2.

-> If the query returns NODATA, the updater can conclude that the target
-> name is in use, but that no DHCID RR is present.  This indicates that
-> some records have been configured by an administrator.  Whether the
-> updater proceeds with an update is a matter of local administrative
-> policy.

Now, admittedly doesn't address the situation where there is no existing
"www" name and a client comes along and requests to use that.

If you have a better name suggestion for the draft, please let me know.

- Bernie

> -----Original Message-----
> From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] 
> On Behalf Of Pekka Savola
> Sent: Tuesday, August 03, 2004 10:57 PM
> To: Bernie Volz
> Cc: dhcwg@ietf.org; 'Ted Lemon'
> Subject: RE: [dhcwg] Trust model of Client FQDN option
> 
> 
> On Tue, 3 Aug 2004, Bernie Volz wrote:
> > Correct, this appears in 
> draft-ietf-dhc-ddns-resolution-07.txt. This 
> > draft is referenced in the "7.  DNS Update Conflicts" 
> section of the 
> > FQDN draft.
> > 
> > The resolution draft still needs additional work for DHCPv6 - it 
> > currently only applies to IPv4.
> 
> This has some, but relatively little, to do with "Resolution 
> of DNS Name Conflicts among DHCP Clients", because the main 
> threat is that it doesn't conflict with another *DHCP client* 
> (though that's imaginable as well) but a manual entry (or 
> that it might not conflict at all, but just be something like 
> wwww.example.com (with one extra 'w').
> 
> In any case, I think this requires quite a bit more extensive 
> discussion (and appropriate pointers) in 
> draft-ietf-dhc-fqdn-option (which seems like the main draft 
> of this bundle) especially from the
> *security* perspective.
> 
> -- 
> Pekka Savola                 "You each name yourselves king, yet the
> Netcore Oy                    kingdom bleeds."
> Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
> 
> 
> _______________________________________________
> dhcwg mailing list
> dhcwg@ietf.org
> https://www1.ietf.org/mailman/listinfo/dhcwg
> 

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg