Re: [dns-privacy] [Errata Held for Document Update] RFC7858 (5375)

Warren Kumari <warren@kumari.net> Mon, 23 December 2019 17:55 UTC

Return-Path: <warren@kumari.net>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A384120C27 for <dns-privacy@ietfa.amsl.com>; Mon, 23 Dec 2019 09:55:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=kumari-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nTB6gKP_lDXG for <dns-privacy@ietfa.amsl.com>; Mon, 23 Dec 2019 09:55:29 -0800 (PST)
Received: from mail-qk1-x72d.google.com (mail-qk1-x72d.google.com [IPv6:2607:f8b0:4864:20::72d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D527120C9D for <dns-privacy@ietf.org>; Mon, 23 Dec 2019 09:55:29 -0800 (PST)
Received: by mail-qk1-x72d.google.com with SMTP id x1so14106235qkl.12 for <dns-privacy@ietf.org>; Mon, 23 Dec 2019 09:55:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kumari-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=xeMJthes4a8RLGhBR2P1rgRqydD5QvoaA+YCmqQfGXo=; b=ETTRqzic9hXNyUHcv9wrrjerC0sOCaSvehuIrzmSKwQvXzmzjE9ssjfWoGPHbgVWIE DVStON8b1g6FUDz2RwLfQlnQApNQnqRW4PovrXHWm1q4Cq7w1zL7MZn+Pem568qy7KRS 5aG3SSnGOv1mDZF5NYNPKbZaGvxW0sYyQ3XF0EOki2NjfAXylNdoGdb1oWS4CyOkb0c0 Gv8RSw7pzvFrDeGe0jgBa19lba5IJ6AjI8Of9HQiDvbWK8CpgOlI/UgFt3y8YcUFzUQ1 Ya7sEMrvZWEkU1tQh8QPfxXqx/b2G1PhlG4/Dt1i/SuQl+RxD172hHtqFdErECsTH5Lb EpuQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=xeMJthes4a8RLGhBR2P1rgRqydD5QvoaA+YCmqQfGXo=; b=N5LODPLaBS0doSgjsJVZfDspoksbZ0M0aR/6pa8ELSeHvmVjRQK00tyatFeSGh9c68 dL6V6y139Z52ikwmaVaYalbfVOey50CJar+5X+n4G76sEn+ioDiJS2RTMYlR9jFt3OKG Bb8dhZOC971O25WAb78HIhdZILiijnJrOobwNW17CCPhRUezDLzk0eBcoCsp3cK/EAGM zruA8mu4AKjRxmNjYpu1NB42lbUrNO63HomJScjA7Or/ISKICFfewUkLooO/Wjc0gcSj kZc8y3kSA8x/RvPMvbgoMSc4Mz3Yy4cTrPvw6hbKZO9LD1/f8+7Sh/bLdzjcdb5k1eKW samA==
X-Gm-Message-State: APjAAAVrEIHpL53F/N99EC6KEYijoUcDf8pGWkHaYhzKJBcfdSJx7F9c ARftiv6xM4RQMrjEtPhqYVxYQNalWUSgLe5map2JF9R5ick=
X-Google-Smtp-Source: APXvYqzw4ixPvFusSyetzAU4IKSZNrTSbp7KHZtFpbZ69I3srwAD32jWAsK/VypxzqbHRav7oaBXiChe6rZ7PAMcpjc=
X-Received: by 2002:ae9:f819:: with SMTP id x25mr27698098qkh.192.1577123727830; Mon, 23 Dec 2019 09:55:27 -0800 (PST)
MIME-Version: 1.0
References: <20191219130836.C4D11F40709@rfc-editor.org> <c0983b61-79b7-0725-3bd7-ad353b7c4d12@nic.cz>
In-Reply-To: <c0983b61-79b7-0725-3bd7-ad353b7c4d12@nic.cz>
From: Warren Kumari <warren@kumari.net>
Date: Mon, 23 Dec 2019 12:54:52 -0500
Message-ID: <CAHw9_iJpb0nPvPZbrz9umo+XE8nYwTMjAd9vqsyyy41Kqc0KGw@mail.gmail.com>
To: Vladimír Čunát <vladimir.cunat+ietf@nic.cz>
Cc: dns-privacy@ietf.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dns-privacy/UE_tnVRurtImUq_ky7oKajRMCBM>
Subject: Re: [dns-privacy] [Errata Held for Document Update] RFC7858 (5375)
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Dec 2019 17:55:33 -0000

[no-hats]

So, this all raises an interesting question -- both dnscrypt.org and
dnscrypt.info resolve, and work for me.... but:
1: "Errata are meant to fix "bugs" in the specification and should not
be used to change what the community meant when it approved the RFC."
- https://www.ietf.org/about/groups/iesg/statements/processing-rfc-errata/
. Clearly, the community "meant" https://www.dnscrypt.org/ when this
was published --- or did they? I'd posit that they actually meant "the
webpage which talks about DNScrypt".
2: The same "how to verify" page says: "Common sense and good judgment
should be used by the IESG to decide what is the right thing to do."

but, more importantly, for the general case, how should the IETF /
IESG verify that example.com and example.net are the "same"? I did the
obvious "let me go look at the whois, and make an educated guess from
that" - but, the scourge of whois proxy registrations makes that
impossible.
As a general rule, it seems like having the site owner publish a
(provided) token on both would work, assuming both sites still
"exist". Luckily, in this case it's not my errata, so I'll run away,
leaving the problem to Eric :-P

W
p.s: if it were mine, I'd probably mark it hold for update with a note
of "someone should validate this..."

On Fri, Dec 20, 2019 at 5:10 AM Vladimír Čunát
<vladimir.cunat+ietf@nic.cz> wrote:
>
> On 12/19/19 2:08 PM, RFC Errata System wrote:
> > [...] www.dnscrypt.org leads to a parking page. The official website is now at www.dnscrypt.info.
>
> The site *does* work for me ATM and looks reasonable at a quick glance,
> but I haven't checked who controls it etc.
>
>
> _______________________________________________
> dns-privacy mailing list
> dns-privacy@ietf.org
> https://www.ietf.org/mailman/listinfo/dns-privacy



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf