Re: [dnsext] loads of TXT records for fun and profit

Mark Andrews <marka@isc.org> Fri, 03 May 2013 13:54 UTC

Return-Path: <marka@isc.org>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EBDFA21F8766 for <dnsext@ietfa.amsl.com>; Fri, 3 May 2013 06:54:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.539
X-Spam-Level:
X-Spam-Status: No, score=-2.539 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PFZsB5ACc1UQ for <dnsext@ietfa.amsl.com>; Fri, 3 May 2013 06:54:45 -0700 (PDT)
Received: from mx.pao1.isc.org (mx.pao1.isc.org [IPv6:2001:4f8:0:2::2b]) by ietfa.amsl.com (Postfix) with ESMTP id 238A921F890F for <dnsext@ietf.org>; Fri, 3 May 2013 06:54:38 -0700 (PDT)
Received: from mx.pao1.isc.org (localhost [127.0.0.1]) by mx.pao1.isc.org (Postfix) with ESMTP id B647CC9423; Fri, 3 May 2013 13:54:29 +0000 (UTC) (envelope-from marka@isc.org)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isc.org; s=dkim2012; t=1367589277; bh=QPRJaB15tUHibocjapbS7nkcj6xQYpyhhluoeQDkdjs=; h=To:Cc:From:References:Subject:In-reply-to:Date; b=p8TKoGCiNpr5fGYLmDpZKbXqYdYt5mxKXlgokOEVuLgeQkGvVP0x1tUPUDSbnkPqD 9BULfPtynUWEsY3YylVhls8WeNWD+y1PJIZkn+wwCCKZwhWJP4endI47pBDi+2k+mI /x8NQnEZWHi4l3VC+NImhPv9++K9rd09+aFarQt4=
Received: from bikeshed.isc.org (bikeshed.isc.org [IPv6:2001:4f8:3:d::19]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "mail.isc.org", Issuer "RapidSSL CA" (not verified)) by mx.pao1.isc.org (Postfix) with ESMTPS; Fri, 3 May 2013 13:54:29 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (unknown [IPv6:2001:470:1f00:820:69de:6e05:3984:4407]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by bikeshed.isc.org (Postfix) with ESMTPSA id 2C82F216C40; Fri, 3 May 2013 13:54:29 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (localhost [IPv6:::1]) by drugs.dv.isc.org (Postfix) with ESMTP id 5C8E733E2780; Fri, 3 May 2013 23:53:09 +1000 (EST)
To: Nicholas Weaver <nweaver@icsi.berkeley.edu>
From: Mark Andrews <marka@isc.org>
References: <20130425013317.36729.qmail@joyce.lan> <80ADB3EE-17FD-4628-B818-801CB71BCBFE@virtualized.org> <alpine.BSF.2.00.1304242309150.38677@joyce.lan> <46778ED3-35A2-44B4-BE3C-AAC4F7B314FF@virtualized.org> <92BBD83F-676D-4B05-B927-4101DD5CAD3E@neustar.biz> <DC121025-A014-492B-AFAD-22CDE49D866E@rfc1035.com> <CAMm+Lwi4MAjX8BAk_ro9usf6AJo=1UERhGBJ1rUa-AbrX09dqg@mail.gmail.com> <E5E3F801-6490-48A8-A12F-A6561893D78A@icsi.berkeley.edu>
In-reply-to: Your message of "Fri, 03 May 2013 06:18:19 -0700." <E5E3F801-6490-48A8-A12F-A6561893D78A@icsi.berkeley.edu>
Date: Fri, 03 May 2013 23:53:08 +1000
Message-Id: <20130503135309.5C8E733E2780@drugs.dv.isc.org>
X-DCC--Metrics: post.isc.org; whitelist
Cc: Edward Lewis <ed.lewis@neustar.biz>, "dnsext@ietf.org" <dnsext@ietf.org>
Subject: Re: [dnsext] loads of TXT records for fun and profit
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 May 2013 13:54:46 -0000

In message <E5E3F801-6490-48A8-A12F-A6561893D78A@icsi.berkeley.edu>, Nicholas Weaver writes:
> 
> On May 3, 2013, at 4:42 AM, Phillip Hallam-Baker <hallam@gmail.com> wrote:
> 
> > It is not just stupid to further overload TXT, it is impossible.
> > 
> > The SPF group knew when they were doing the draft that they were essentially making any other use of the 
> > TXT record infeasible in the future. Or at least I pointed that out.
> 
> No its not, its trivial to further overload the text record.  All you have to do is make sure YOUR strings 
> don't start with the same magic string, and/or are located in a different convention in the DNS hierarchy, 
> as SPF records.

As well as whatever anyone else is doing with TXT records.

> And given the silly resistance amongst some in this group to tolerate allocating new RR types (look at the 
> debate over the entirely sensible EUI48 and EUI64 RTYPEs), and the annoyance of getting authority software 
> to allow one to provision new RTYPEs in an easily readable form [1],

Yet there was code shipped that supported EUI48 and EUI64 before the first
word of complaint was raised.

> it makes perfect sense for developers 
> who want to shove something into DNS to skip the whole IETF crap, create a convention, and shove things eit
> her in A-records (like the RBLs have done) or TXT records.
>
> [1] Yes, you can specify it as:
> 
> >       The special token \# (a backslash immediately followed by a hash
> >       sign), which identifies the RDATA as having the generic encoding
> >       defined herein rather than a traditional type-specific encoding.
> > 
> >       An unsigned decimal integer specifying the RDATA length in octets.
> > 
> >       Zero or more words of hexadecimal data encoding the actual RDATA
> >       field, each containing an even number of hexadecimal digits.
> 
> But lets face it, thats a PITA compared to going "MYTYPE: this is my record" as one string in a TXT record.

Or you could write a tool that uses the existing resolver libraries
to dynamically load the records.  You don't have to wait for
nameserver developer to update nameservers or registrars to update
web forms to use new types.

> _______________________________________________
> dnsext mailing list
> dnsext@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsext
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org