Re: [dnsext] loads of TXT records for fun and profit

David Conrad <drc@virtualized.org> Fri, 03 May 2013 17:12 UTC

Return-Path: <drc@virtualized.org>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27D8A21F9AEB for <dnsext@ietfa.amsl.com>; Fri, 3 May 2013 10:12:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4te8od8JqASe for <dnsext@ietfa.amsl.com>; Fri, 3 May 2013 10:12:23 -0700 (PDT)
Received: from trantor.virtualized.org (trantor.virtualized.org [199.48.134.42]) by ietfa.amsl.com (Postfix) with ESMTP id 50CEC21F8E6B for <dnsext@ietf.org>; Fri, 3 May 2013 08:59:06 -0700 (PDT)
Received: from [10.100.1.35] (35-64.lax.icann.org [192.0.35.64]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: drc) by trantor.virtualized.org (Postfix) with ESMTPSA id AFD0317184; Fri, 3 May 2013 15:58:59 +0000 (UTC)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\))
From: David Conrad <drc@virtualized.org>
In-Reply-To: <E5E3F801-6490-48A8-A12F-A6561893D78A@icsi.berkeley.edu>
Date: Fri, 03 May 2013 08:59:00 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <D00A1E79-40F2-4EFF-975C-8618C7AC750A@virtualized.org>
References: <20130425013317.36729.qmail@joyce.lan> <80ADB3EE-17FD-4628-B818-801CB71BCBFE@virtualized.org> <alpine.BSF.2.00.1304242309150.38677@joyce.lan> <46778ED3-35A2-44B4-BE3C-AAC4F7B314FF@virtualized.org> <92BBD83F-676D-4B05-B927-4101DD5CAD3E@neustar.biz> <DC121025-A014-492B-AFAD-22CDE49D866E@rfc1035.com> <CAMm+Lwi4MAjX8BAk_ro9usf6AJo=1UERhGBJ1rUa-AbrX09dqg@mail.gmail.com> <E5E3F801-6490-48A8-A12F-A6561893D78A@icsi.berkeley.edu>
To: Nicholas Weaver <nweaver@icsi.berkeley.edu>
X-Mailer: Apple Mail (2.1503)
Cc: "dnsext@ietf.org Group" <dnsext@ietf.org>
Subject: Re: [dnsext] loads of TXT records for fun and profit
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 May 2013 17:12:33 -0000

Nicholas,

On May 3, 2013, at 6:18 AM, Nicholas Weaver <nweaver@icsi.berkeley.edu> wrote:
>> The SPF group knew when they were doing the draft that they were essentially making any other use of the TXT record infeasible in the future. Or at least I pointed that out.
> No its not, its trivial to further overload the text record.  

Not really. The ABNF of SPF does not take into account the order of RRs within an RRset is not guaranteed. The "v=spf1" version discriminator does not prefix each "term", it only prefixes a "record" and SPF terms can be split over multiple TXT records.

> And given the silly resistance amongst some in this group to tolerate allocating new RR types (look at the debate over the entirely sensible EUI48 and EUI64 RTYPEs),

The EUI48 and EUI64 RR types were allocated.  The 'silly resistance' came later.

> and the annoyance of getting authority software to allow one to provision new RTYPEs in an easily readable form [1],

Yep, that's a challenge, and hence the underscore label convention.  

> it makes perfect sense for developers who want to shove something into DNS to skip the whole IETF crap, create a convention, and shove things either in A-records (like the RBLs have done) or TXT records.

Yes, and the SPF community has greatly complicated (or removed) that capability for domains used in "MAIL FROM/HELO".

Regards,
-drc