Re: [dnsext] enough is enough

Mark Andrews <marka@isc.org> Mon, 22 December 2014 06:58 UTC

Return-Path: <marka@isc.org>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1BBA1A89F5 for <dnsext@ietfa.amsl.com>; Sun, 21 Dec 2014 22:58:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.611
X-Spam-Level:
X-Spam-Status: No, score=-1.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JqorlI7t8948 for <dnsext@ietfa.amsl.com>; Sun, 21 Dec 2014 22:58:08 -0800 (PST)
Received: from mx.pao1.isc.org (mx.pao1.isc.org [IPv6:2001:4f8:0:2::2b]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDC3D1A89EF for <dnsext@ietf.org>; Sun, 21 Dec 2014 22:58:07 -0800 (PST)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) by mx.pao1.isc.org (Postfix) with ESMTP id 67A6F3493B8; Mon, 22 Dec 2014 06:58:04 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 02AF2160067; Mon, 22 Dec 2014 07:03:22 +0000 (UTC)
Received: from rock.dv.isc.org (c211-30-183-50.carlnfd1.nsw.optusnet.com.au [211.30.183.50]) by zmx1.isc.org (Postfix) with ESMTPSA id 8C844160059; Mon, 22 Dec 2014 07:03:21 +0000 (UTC)
Received: from rock.dv.isc.org (localhost [IPv6:::1]) by rock.dv.isc.org (Postfix) with ESMTP id 62ED8263C4C2; Mon, 22 Dec 2014 17:58:00 +1100 (EST)
To: Patrik Fältström <paf@frobbit.se>
From: Mark Andrews <marka@isc.org>
References: <20141220125805.GB20765@xs.powerdns.com> <20141220142506.C7EA12630502@rock.dv.isc.org> <A78F8417-AEA2-42BF-A7D5-96FE99DCBBBE@rfc1035.com> <20141220204337.4F47026313BC@rock.dv.isc.org> <7A31183A-CC1E-4F0A-A2EA-848B10B60A2B@insensate.co.uk> <E732A2F7-E467-4940-8A66-726FC894B4B3@frobbit.se> <20141221094454.GC13389@xs.powerdns.com> <11AD7639-D2AA-41F4-ACA4-70190E449253@rfc1035.com> <20141222040653.890E4263B845@rock.dv.isc.org> <B4987304-459A-4835-8162-2BA469C3C4F7@frobbit.se>
In-reply-to: Your message of "Mon, 22 Dec 2014 06:55:27 +0100." <B4987304-459A-4835-8162-2BA469C3C4F7@frobbit.se>
Date: Mon, 22 Dec 2014 17:58:00 +1100
Message-Id: <20141222065800.62ED8263C4C2@rock.dv.isc.org>
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsext/EqdjTH7AWq5Jif7T3q48T-LHx_o
Cc: DNSEXT Group Working <dnsext@ietf.org>, bert hubert <bert.hubert@netherlabs.nl>
Subject: Re: [dnsext] enough is enough
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext/>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Dec 2014 06:58:09 -0000

In message <B4987304-459A-4835-8162-2BA469C3C4F7@frobbit.se>, =?utf-8?Q?Patrik_F=C3=A4lt
str=C3=B6m?= writes:
> > On 22 dec 2014, at 05:06, Mark Andrews <marka@isc.org> wrote:
> >
> > To my knowledge no one has attempted to get nameservers upgraded
> > by sending email to delegated server operators.
>
> Maybe because one do not know who these name server operators are. And in
> the cases one do (like in some ccTLDs), that has other drawbacks.

Send it to the SOA RNAME.  If that does not work send it to the
registrant (by the registrar if need be).  They are ultimately
responsible for the domain.  If those contact methods bounce initiate
the proceedures for broken contacts.

> > Sending email to TLD operators does have a effect.
>
> Well, well...
>
> > Whether that can be replicated the next level down we need to see.
>
> Some TLD registries have tried to contact DNS operators, some contact the
> registrant, some contact the registrar.

The registrant is ultimately responsible for picking the registrar
and DNS operator if it is not themselves.  It is the registrars job
to contact the registrant on behalf of the registry where the
contract precludes direct contact.

> > Additionally classic lameness will come back over time as it is a
> > configuration issue.
>
> And my point was only that enough registries do have a policy that
> REQUIRE lame delegations to be able to just register a domain name (i.e.
> one can not register without delegating at the same time). Crazy!
>
> But as you say, this is a configuration issue, and not a software issue.

No.  That is a policy issue.

Just because you do not like the policy is not a reason to not
configure servers if that is the policy of the parent domain.  It's
not like they won't be running some servers for some zones.  Those
servers can be configured with minimal zones (soa + ns records).

>    Patrik
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org