IETF Logo Mail Archive

Re: [dnsext] Re: EDNS client IP should be opt-in (Was: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt

Wilmer van der Gaast <wilmer@google.com> Tue, 02 February 2010 21:33 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 999BC3A69A8; Tue, 2 Feb 2010 13:33:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.565
X-Spam-Level:
X-Spam-Status: No, score=-105.565 tagged_above=-999 required=5 tests=[AWL=0.413, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JNTTpBqJMBeD; Tue, 2 Feb 2010 13:33:16 -0800 (PST)
Received: from psg.com (psg.com [147.28.0.62]) by core3.amsl.com (Postfix) with ESMTP id 972E83A6972; Tue, 2 Feb 2010 13:33:16 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1NcQH7-000Fvj-R5 for namedroppers-data0@psg.com; Tue, 02 Feb 2010 21:27:09 +0000
Received: from [216.239.33.17] (helo=smtp-out.google.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.71 (FreeBSD)) (envelope-from <wilmer@google.com>) id 1NcQH5-000Fv3-Gy for namedroppers@ops.ietf.org; Tue, 02 Feb 2010 21:27:07 +0000
Received: from kpbe18.cbf.corp.google.com (kpbe18.cbf.corp.google.com [172.25.105.82]) by smtp-out.google.com with ESMTP id o12LR5Hn006085 for <namedroppers@ops.ietf.org>; Tue, 2 Feb 2010 21:27:05 GMT
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=google.com; s=beta; t=1265146025; bh=HCpZm6U+LUvEeN3ypmRzITzrtNY=; h=MIME-Version:In-Reply-To:References:Date:Message-ID:Subject:From: To:Cc:Content-Type:Content-Transfer-Encoding; b=fJL33ZrD/wIfAuaThQGbkYTwGenjy14d0tyRtgcxWcVQzrB6jUcHTO5uH03ASfSVO Fu17c8+BQD9lWQWcTzORA==
DomainKey-Signature: a=rsa-sha1; s=beta; d=google.com; c=nofws; q=dns; h=mime-version:in-reply-to:references:date:message-id:subject:from:to: cc:content-type:content-transfer-encoding:x-system-of-record; b=P8eBM/jXrxkU/jE7dYQGil+w8L+z25WuNoWO/SRQdncZ+/lYGMlMyuoA8s9XoI0Ly Uy09cnzdTZe7++VxfFFCw==
Received: from bwz21 (bwz21.prod.google.com [10.188.26.21]) by kpbe18.cbf.corp.google.com with ESMTP id o12LR35K021076 for <namedroppers@ops.ietf.org>; Tue, 2 Feb 2010 13:27:03 -0800
Received: by bwz21 with SMTP id 21so407566bwz.24 for <namedroppers@ops.ietf.org>; Tue, 02 Feb 2010 13:27:02 -0800 (PST)
MIME-Version: 1.0
Received: by 10.204.24.84 with SMTP id u20mr2685437bkb.164.1265146022715; Tue, 02 Feb 2010 13:27:02 -0800 (PST)
In-Reply-To: <71552.1265143879@nsa.vix.com>
References: <7c31c8cc1001271556w4918093er6e94e07cb92c4dc4@mail.gmail.com> <4B66E441.6090104@nic.cz> <4966825a1002010729m32b5ccfel94f7cb09d8b5e458@mail.gmail.com> <20100202113421.GA31244@nic.fr> <4966825a1002020355s41a182edvbc2fc8045af4a36e@mail.gmail.com> <4B681EB5.9040403@nic.cz> <71552.1265143879@nsa.vix.com>
Date: Tue, 02 Feb 2010 21:27:02 +0000
Message-ID: <7c31c8cc1002021327l4397502bk647f96813ac37948@mail.gmail.com>
Subject: Re: [dnsext] Re: EDNS client IP should be opt-in (Was: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt
From: Wilmer van der Gaast <wilmer@google.com>
To: Paul Vixie <vixie@isc.org>
Cc: namedroppers@ops.ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
X-System-Of-Record: true
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On 2 February 2010 20:51, Paul Vixie <vixie@isc.org> wrote:
> that all depends on the RFC text.  big ISP's sometimes have privacy policies
> and sometimes do not but they do live in some fear of their regulators.  and
> while i expect BIND would implement this feature, we would never make it the
> default.

Note that this is already recommended in the first bullet point in
8.2. Indeed we didn't ever intend this to be an "enabled by default"
feature.


Wilmer.

-- 
Wilmer van der Gaast, Dublin Traffic SRE.
Google Ireland.

v2.23.0 | Report a Bug | By Email