Re: [dnsext] [spfbis] Obsoleting SPF RRTYPE

Doug Barton <dougb@dougbarton.us> Thu, 25 April 2013 20:54 UTC

Return-Path: <dougb@dougbarton.us>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADCD221F9670; Thu, 25 Apr 2013 13:54:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ndMKZJrB1YxO; Thu, 25 Apr 2013 13:54:40 -0700 (PDT)
Received: from dougbarton.us (dougbarton.us [208.79.90.218]) by ietfa.amsl.com (Postfix) with ESMTP id F0E2521F965F; Thu, 25 Apr 2013 13:54:39 -0700 (PDT)
Received: from [IPv6:2001:470:d:5e7:4c6a:66e4:b138:d86] (unknown [IPv6:2001:470:d:5e7:4c6a:66e4:b138:d86]) by dougbarton.us (Postfix) with ESMTPSA id 98B2622BA3; Thu, 25 Apr 2013 20:54:39 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=dougbarton.us; s=dougbarton.us; t=1366923279; bh=/lxC1rSFs1cM9IOfLanu8/jAulxNybK0yU4gHP6o6VA=; h=Date:From:To:CC:Subject:References:In-Reply-To; b=SKCC7UKqWxyJg2AEwvd1B8DmNqDWfWPDKge3rJgDT9Uyb5pmJE8uj4NmY8PYksduh zDPWJJMx76ZKoIauzkOc211OvjTeIsxuNcduPieeAPg9e0c7rMPDSxiNq/PN8P2IXF S4su5rT8Z6b0pLKlb61NCwCFZUDtAVlBd85gZGr0=
Message-ID: <5179980F.9090606@dougbarton.us>
Date: Thu, 25 Apr 2013 13:54:39 -0700
From: Doug Barton <dougb@dougbarton.us>
User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:17.0) Gecko/20130328 Thunderbird/17.0.5
MIME-Version: 1.0
To: dnsext@ietf.org
References: <20130425013317.36729.qmail@joyce.lan> <80ADB3EE-17FD-4628-B818-801CB71BCBFE@virtualized.org> <BB8C643A-FC46-4B2F-B677-F1B7CAB0E79F@frobbit.se> <alpine.BSF.2.00.1304251030380.65043@joyce.lan> <14A728AE-83DC-4C1F-A88A-6F988D37F2C7@frobbit.se> <20130425154235.GP23770@besserwisser.org> <5179691B.50602@qti.qualcomm.com>
In-Reply-To: <5179691B.50602@qti.qualcomm.com>
X-Enigmail-Version: 1.5.1
OpenPGP: id=1A1ABC84
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 8bit
Cc: spfbis@ietf.org, presnick@qti.qualcomm.com
Subject: Re: [dnsext] [spfbis] Obsoleting SPF RRTYPE
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Apr 2013 20:54:40 -0000

On 04/25/2013 10:34 AM, Pete Resnick wrote:
> On 4/25/13 10:42 AM, Måns Nilsson wrote:
>> And IMNSHO spfbis is out of scope prescribing TXT records, just because
>> of this contagiousness.
>>
>> For the record: I think that the spfbis draft is unfit for publication
>> as RFC unless TXT records are deprectaed as only carrier of data.
>
> SPFBIS AD hat on for this:
>
> We are *long* past this discussion. This discussion should have happened
> at SPFBIS *chartering* time, as it is crystal clear from the charter
> that existing features currently in use in SPF are not going away.
> Indeed, the TXT record was specifically mentioned in the charter.

As Ted pointed out, that seems not to be the case.

Meanwhile, some of us have spoken long and loud about how deprecating 
the SPF record is the wrong path, which includes before, during, and 
after spfbis was chartered. Those concerns have consistently been 
shouted down, as you are doing now.

The way forward is simple, spfbis should specify that compliant senders 
MUST publish the SPF record, and compliant receivers MUST query for it 
first. Then down the road at some point we can deprecate TXT for this 
purpose. If that had been done in the beginning we would be celebrating 
the deprecation of the TXT record right about now, instead of having 
another round of contentious arguments about doing it the right way in 
the first place.

Everyone knows the history of how hard it was to get new RRtypes off the 
ground at the time SPF first came into being. A lot of lessons were 
learned from that, and the situation is much better now. Everyone also 
understands that the problem of upgrading 3rd party and/or web-based 
provisioning systems to accommodate new records is still a problem. But 
that problem doesn't get better by ignoring it.

In short, the proponents of SPF (which by the way, I like and use) 
should be focusing on doing the right thing here, instead of the 
expedient thing.

Doug