Re: [dnsext] New RRtype "KREALM" in draft-vanrein-dnstxt-krb1-02.txt

Rick van Rein <rick@openfortress.nl> Fri, 11 September 2015 11:05 UTC

Return-Path: <rick@openfortress.nl>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AF071B29C9 for <dnsext@ietfa.amsl.com>; Fri, 11 Sep 2015 04:05:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.401
X-Spam-Level:
X-Spam-Status: No, score=-1.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_54=0.6, J_CHICKENPOX_74=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rj3lGxnBBQyY for <dnsext@ietfa.amsl.com>; Fri, 11 Sep 2015 04:05:00 -0700 (PDT)
Received: from lb3-smtp-cloud2.xs4all.net (lb3-smtp-cloud2.xs4all.net [194.109.24.29]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4982F1B48E2 for <dnsext@ietf.org>; Fri, 11 Sep 2015 04:04:59 -0700 (PDT)
Received: from airhead.local ([83.161.146.46]) by smtp-cloud2.xs4all.net with ESMTP id Fn4v1r00310HQrX01n4wB4; Fri, 11 Sep 2015 13:04:57 +0200
Message-ID: <55F2B555.4050105@openfortress.nl>
Date: Fri, 11 Sep 2015 13:04:53 +0200
From: Rick van Rein <rick@openfortress.nl>
User-Agent: Postbox 3.0.11 (Macintosh/20140602)
MIME-Version: 1.0
To: Tony Finch <dot@dotat.at>
References: <55E868E8.6050504@openfortress.nl> <alpine.LSU.2.00.1509081536450.734@hermes-2.csi.cam.ac.uk> <55F2A5CC.1080409@openfortress.nl> <alpine.LSU.2.00.1509111115410.29599@hermes-2.csi.cam.ac.uk>
In-Reply-To: <alpine.LSU.2.00.1509111115410.29599@hermes-2.csi.cam.ac.uk>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsext/9kRtwpJ9m5nfGUG60BIkwbNLuqs>
Cc: dnsext@ietf.org
Subject: Re: [dnsext] New RRtype "KREALM" in draft-vanrein-dnstxt-krb1-02.txt
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsext/>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Sep 2015 11:05:02 -0000

Hi Tony,

> Yes, I think the wire format and presentation format should be native DNS
> not ASN.1.

Ah.  That would call for more complex parsing.  I hadn't expected that to be preferred by the DNS community, over simplicity.  Is the reason readability of zone files?

HINFO uses precisely 2 strings, with KREALM it'd be variable, but could be done with something like

@ IN KREALM ( "realm=EXAMPLE.COM" "realm=EXAMPLE.ORG"
      admin=carl "admin=mary"
      service=HTTP "service=imap" )

The parser then MAY check the presence of an = sign in the string but otherwise keep tag and value together.

Each of these strings would then independently translate to a separate <character-string>, namely

12 72 65 61 6c 6d 3d 45 58 41 4d 50 4c 45 2e 43 4f 4d
12 72 65 61 6c 6d 3d 45 58 41 4d 50 4c 45 2e 4f 52 47
0b 61 64 6d 69 6e 3d 63 61 72 6c
0b 61 64 6d 69 6e 3d 6d 61 72 79
0d 73 65 72 76 69 63 65 3d 48 54 54 50
0d 73 65 72 76 69 63 65 3d 69 6d 61 70

But that's a variable number of strings in the textual format *and* in the RDATA format.  The RDATA is preceded by RDLENGTH, so it would be possible, but I am hesitant about such new approaches to DNS.

Alternatively, we could incorporate separator characters such as comma's but that would constrain the possible string values (and call for even more escaping and another level, which isn't my favourite place to go).

I expect an uproar from both alternatives to be honest.  Or not?

-Rick