Re: [dnsext] draft-vandergaast-edns-client-ip-00.txt

Jim Reid <jim@rfc1035.com> Tue, 02 February 2010 16:51 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 390BE3A68D9; Tue, 2 Feb 2010 08:51:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.524
X-Spam-Level:
X-Spam-Status: No, score=-106.524 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lY-bwSWEZNTJ; Tue, 2 Feb 2010 08:51:26 -0800 (PST)
Received: from psg.com (psg.com [147.28.0.62]) by core3.amsl.com (Postfix) with ESMTP id 6F11B3A68C5; Tue, 2 Feb 2010 08:51:26 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1NcLtp-000Dgp-92 for namedroppers-data0@psg.com; Tue, 02 Feb 2010 16:46:49 +0000
Received: from [195.54.233.65] (helo=hutch.rfc1035.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.71 (FreeBSD)) (envelope-from <jim@rfc1035.com>) id 1NcLtm-000Dg7-7t for namedroppers@ops.ietf.org; Tue, 02 Feb 2010 16:46:46 +0000
Received: from gromit.rfc1035.com (gromit.rfc1035.com [195.54.233.69]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jim) by hutch.rfc1035.com (Postfix) with ESMTPSA id 49990154283D; Tue, 2 Feb 2010 16:46:42 +0000 (GMT)
Cc: namedroppers@ops.ietf.org
Message-Id: <7B06A582-38E3-4387-BA16-932825A4A62B@rfc1035.com>
From: Jim Reid <jim@rfc1035.com>
To: John Payne <john@sackheads.org>
In-Reply-To: <939BB577-FDBE-4573-9129-8CA29B0FB493@sackheads.org>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"; delsp="yes"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v936)
Subject: Re: [dnsext] draft-vandergaast-edns-client-ip-00.txt
Date: Tue, 02 Feb 2010 16:46:41 +0000
References: <7c31c8cc1001271556w4918093er6e94e07cb92c4dc4@mail.gmail.com> <OF675CC47F.6FE1B342-ON802576BA.00453090-C12576BA.0047E04C@nominet.org.uk> <74DFF61A-A8BB-4B46-A873-F2407C34C412@sackheads.org> <139D0D6A-5A31-4EE8-88B9-3CACE933187B@icsi.berkeley.edu> <6e04e83a1002010944q7abfabc6h892ce4cbb1bddcbf@mail.gmail.com> <973B1F15-E822-491E-89BF-F09FC7E67509@ICSI.Berkeley.EDU> <6e04e83a1002011109u1cd55c99k8b584648184cdc73@mail.gmail.com> <162E0DB1-EC86-4206-AB36-6FEFA786B24C@ICSI.Berkeley.EDU> <6e04e83a1002011402u395f599g74180d28fdbe5707@mail.gmail.com> <939BB577-FDBE-4573-9129-8CA29B0FB493@sackheads.org>
X-Mailer: Apple Mail (2.936)
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On 1 Feb 2010, at 22:07, John Payne wrote:

> Yes, it adds complexity to the recursive nameservers _that want to  
> send the information_.
>
> Where else is it adding any complexity?

[1] Stub resolvers that don't want their address info disclosed. Or  
those who may want to send that info (how??) but are talking to  
resolving servers who don't. Or the resolving servers tamper with that  
data whenever they query the authoritative server(s). Or choose to  
mangle whatever is returned as the optimised response.

[2] Authoritative servers who can't/won't speak this EDNS0 option. The  
draft does not specify how they should behave.

Another Bad Idea in this draft is the concept of not using these  
extended queries to root and TLD servers. [Ironically, this is one  
place where "optimised" addresses in responses could be useful by  
directing resolvers to the nearest server for a referral.] It's not a  
good idea IMO to constrain a particular protocol query format to  
certain parts of the name space or an arbitrary number of labels in  
the QNAME.