IETF Logo Mail Archive

Re: [dns-privacy] [dnsdir] [Ext] WGLC : draft-ietf-dprive-unilateral-probing

Peter van Dijk <peter.van.dijk@powerdns.com> Mon, 03 July 2023 10:19 UTC

Return-Path: <peter.van.dijk@powerdns.com>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81B02C151538; Mon, 3 Jul 2023 03:19:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.095
X-Spam-Level:
X-Spam-Status: No, score=-7.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=powerdns.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5THr9Ded-pFt; Mon, 3 Jul 2023 03:19:19 -0700 (PDT)
Received: from mx3.open-xchange.com (mx3.open-xchange.com [87.191.57.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41B95C14E513; Mon, 3 Jul 2023 03:19:18 -0700 (PDT)
Received: from imap.open-xchange.com (imap.open-xchange.com [86.85.149.247]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx3.open-xchange.com (Postfix) with ESMTPSA id 07C686A0D0; Mon, 3 Jul 2023 12:19:15 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=powerdns.com; s=202306; t=1688379555; bh=/2Bx1GNkjFrUKRrNhMwXnE4mju3DncwhjWAO0HPZfeA=; h=Subject:From:To:Date:In-Reply-To:References:From; b=eVFNcd0MBM6FNvwvd5Yp0K5wPgJVUFQO75Rnz0eUAoIObjqntdY6WyEsuGAw7rY+u /SL4rw/2mr0PPAqrZdizVQI5SgI0UmDESS4L3RzIfuTY34jXSZb/mGVwRagLkwrZZz CxUqSA3DZr8l//ioLYVsq3u3FCam4b7ezQpnM5lFQ3Dn1sbvwcxp5mX2x0l/vNlopB 23agIrX+FS8n0ilcLMvcEhsX69xRdgmpOFUPj1tPGgP2jR3cD7vRMFOF8+dPug0cHW QDo+Q1OcIsQSxMQyCCGEUn3wp6HU4MXKt9U3x3zSdki2PzIeCmKhEY6PRXOUA3RUKv 0K4zcmqxz4LBA==
Received: from [10.91.39.75] ([86.85.149.247]) by imap.open-xchange.com with ESMTPSA id inHjOqKgomQo8ycA3c6Kzw (envelope-from <peter.van.dijk@powerdns.com>); Mon, 03 Jul 2023 12:19:15 +0200
Message-ID: <3f0f1e2d5ccfadb535a65d30158fd8cc2ac4a7bc.camel@powerdns.com>
From: Peter van Dijk <peter.van.dijk@powerdns.com>
To: "dns-privacy@ietf.org" <dns-privacy@ietf.org>, "dnsdir@ietf.org" <dnsdir@ietf.org>
Date: Mon, 03 Jul 2023 12:19:14 +0200
In-Reply-To: <578023ded20b16d081d2e40f9ef55821681a80ef.camel@powerdns.com>
References: <64e17d73-ea1a-00cb-a8a5-b5cfb39c37ae@innovationslab.net> <CADyWQ+HMj5NH1g_oCTNxYkGDmp2L3EwmMyOv2-bXeXvp5kvm0A@mail.gmail.com> <6B55CCC0-069F-43DD-B9DA-024E4334D6F4@icann.org> <20c5ac1666e4428b8ffa70c7b9e8a19c@verisign.com> <CADyWQ+HJ7ZLWfwxr6vb9HsERMJXuu-1zD_=cr4S+mZ1ieWrYwQ@mail.gmail.com> <0007CDA7-ADD3-43BB-B5D3-3B1810206E0E@icann.org> <8fbed8926b3f4e28b9f3f76a85e0b619@verisign.com> <CANMuhxt5cE--GUtapEL69dFkAFSU5dF3psMCgNRKj8_dXpsFLA@mail.gmail.com> <ABE27A4A-BA96-4505-A3E3-1FE83CAA5A63@icann.org> <m1q6YGM-0000KoC@stereo.hq.phicoh.net> <3B79D45A-1F95-4A4A-9F8D-D3D9C424B4B2@icann.org> <m1q6oAa-0000KqC@stereo.hq.phicoh.net> <E68DAF11-E748-4F3C-AAD3-4E5921B652D9@icann.org> <m1q7FM5-0000LSC@stereo.hq.phicoh.net> <9E965077-D2BA-46C7-99EC-5B4C37918069@icann.org> <m1q82YG-0000MXC@stereo.hq.phicoh.net> <B2088F5F-60B6-4796-B16F-ED7F42838B72@icann.org> <m14jndnsh3.fsf@narrans.de> <B9001CCC-3686-4EED-8B2E-856291269240@icann.org> <m1ilbqhsyr.fsf@narrans.de> <24B7D6A7-0200-431F-87C8-913D92C68C8C@icann.org> <m15y75szjw.fsf@narrans.de> <E819B3A1-A3C8-4AE9-84D8-D9F9C992CB99@icann.org> <578023ded20b16d081d2e40f9ef55821681a80ef.camel@powerdns.com>
Organization: PowerDNS.COM B.V.
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.38.3-1+deb11u1
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dns-privacy/vmwQFWw0IhIMOorLGXeKyT0fjM0>
Subject: Re: [dns-privacy] [dnsdir] [Ext] WGLC : draft-ietf-dprive-unilateral-probing
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Addition of privacy to the DNS protocol <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Jul 2023 10:19:23 -0000

On Mon, 2023-07-03 at 10:50 +0200, Peter van Dijk wrote:
> On Fri, 2023-06-30 at 16:32 +0000, Paul Hoffman via dnsdir wrote:
> > The current wording at the end of 4.6.9 is:
> >    But if `R` is unsuccessful (e.g. timeout or connection closed):
> > 
> > I believe that changing that to the following would fix the problem you describe:
> >    But if `R` is unsuccessful (RCODE other than 0, timeout, connection closed):
> > 
> > Does that fix your case and not break other cases?
> 
> You need to allow, at a minimum, RCODE 3 (NXDomain) too.

After a poke from Paul, a clearer version: both RCODE 0 and RCODE 3 can
be good responses from an auth.

(In hindsight, it's a terrible mistake that 1035 calls RCODE 3 "Name
Error" - it's not an error.)

Kind regards,
-- 
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/

v2.23.0 | Report a Bug | By Email