Re: [dnsext] Design team report on dnssec-bis-updates and CD bit
Andrew Sullivan <ajs@shinkuro.com> Sun, 11 July 2010 02:36 UTC
Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1510D3A68E0; Sat, 10 Jul 2010 19:36:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.572
X-Spam-Level: *
X-Spam-Status: No, score=1.572 tagged_above=-999 required=5 tests=[AWL=-0.224, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_INFO=1.448, MIME_QP_LONG_LINE=1.396, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zOp38QeY-VO6; Sat, 10 Jul 2010 19:36:55 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 153863A659A; Sat, 10 Jul 2010 19:36:54 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.72 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1OXmIf-000OKa-6c for namedroppers-data0@psg.com; Sun, 11 Jul 2010 02:29:49 +0000
Received: from [208.86.224.201] (helo=mail.yitter.info) by psg.com with esmtps (TLSv1:CAMELLIA256-SHA:256) (Exim 4.72 (FreeBSD)) (envelope-from <ajs@shinkuro.com>) id 1OXmIb-000OKE-VJ for namedroppers@ops.ietf.org; Sun, 11 Jul 2010 02:29:46 +0000
Received: from [172.16.33.105] (69-196-144-230.dsl.teksavvy.com [69.196.144.230]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.yitter.info (Postfix) with ESMTPSA id 601F81ECB41F; Sun, 11 Jul 2010 02:29:43 +0000 (UTC)
References: <20100709142108.GA68527@shinkuro.com> <20100709220459.GB22072@vacation.karoshi.com.> <4C388C2F.4030608@ogud.com> <20100710213342.GC22072@vacation.karoshi.com.>
In-Reply-To: <20100710213342.GC22072@vacation.karoshi.com.>
Mime-Version: 1.0 (iPhone Mail 8A293)
Content-Type: text/plain; charset="us-ascii"
Message-Id: <245B9BED-F21A-4259-A649-0353D3248A20@shinkuro.com>
Content-Transfer-Encoding: quoted-printable
Cc: Olafur Gudmundsson <ogud@ogud.com>, "bmanning@vacation.karoshi.com" <bmanning@vacation.karoshi.com>, "namedroppers@ops.ietf.org" <namedroppers@ops.ietf.org>
X-Mailer: iPhone Mail (8A293)
From: Andrew Sullivan <ajs@shinkuro.com>
Subject: Re: [dnsext] Design team report on dnssec-bis-updates and CD bit
Date: Sat, 10 Jul 2010 22:29:41 -0400
To: "bmanning@vacation.karoshi.com" <bmanning@vacation.karoshi.com>
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>
On 2010-07-10, at 17:33, bmanning@vacation.karoshi.com wrote: > On Sat, Jul 10, 2010 at 11:05:19AM -0400, Olafur Gudmundsson wrote: >> On 09/07/2010 6:04 PM, bmanning@vacation.karoshi.com wrote: >>> On Fri, Jul 09, 2010 at 10:21:08AM -0400, Andrew Sullivan wrote: >>>> Dear colleagues, >>>> >>>> On 2010-07-06, there was a design team meeting in Bethesda, MD, to >>>> address the issue of setting the CD bit in the dnssec-bis-updates >>>> draft. David Blacka, Olafur Gudmundsson, Mike StJohns, and Andrew >>>> Sullivan attended. >>>> >>>> In the meeting, we concluded by describing three different models for >>>> how the CD bit is to be treated and used by a validating resolver >>>> (i.e. one that has at least one trust anchor), and what interaction >>>> this has with a local cache. We based these models on RFC 4035, on >>>> the discussion we saw on the list on this topic, and on what we think >>>> people have implemented. We want one, and only one, of these models >>>> to be described in the draft as the standard model. These models are >>>> outlined below. >>> >>> >>> so the We in the para above is the design team of >>> yourself, David, Olafur, and Mike. This does not meet >>> the WG criteria of "five" reviewers. >> >> This is orthogonal, design team can be of any size, the output of an >> design team can be one of: >> a proposal of way forward >> a list of options >> a comment on a particular design. >> a statement of failure to reach conclusion > > hum... this kind of makes the IETF WG process subject to capture, > don't you think? According to you, a design team of one can make > a statement about failure to reach conclusion... Thats a pretty > low bar. To be clear, nobody is suggesting this is a WG product. If it were, we could rule on consensus rather than discussing. But we brought this input to the WG as our considered opinion. > except Andrew, as spokesperson for the design team cast a > bias - not just the presentation of options with a request > to the WG to come to consensus. The report says that we want one option, that's true. I personally prefer that the WG coalesce around one because I think a completely indeterminate behavior on the part of intermediate resolvers would be very bad for user experience. I'd be interested in counter arguments. > To compound influence, there > was an inferance that the WG chairs would close this topic Actually, I don't think an inference was needed. And I didn't imply anything. I stated that if the WG couldn't reach consensus, we could leave this topic out of the draft on the grounds that we have no consensus. That's not a threat; it's the chair's job to say such things. As it transpires, I believe now that the tables are a significant enough improvement over the existing 4035 text that we should include them all if need be. But I see no reason why we cannot at least settle on a predictable default. A -- Andrew Sullivan <ajs@shinkuro.com>
- [dnsext] Design team report on dnssec-bis-updates… Andrew Sullivan
- Re: [dnsext] Design team report on dnssec-bis-upd… bmanning
- Re: [dnsext] Design team report on dnssec-bis-upd… Olafur Gudmundsson
- Re: [dnsext] Design team report on dnssec-bis-upd… Masataka Ohta
- Re: [dnsext] Design team report on dnssec-bis-upd… bmanning
- Re: [dnsext] Design team report on dnssec-bis-upd… Andrew Sullivan
- Re: [dnsext] Design team report on dnssec-bis-upd… Jiankang YAO
- Re: [dnsext] Design team report on dnssec-bis-upd… Michael Graff
- Re: [dnsext] Design team report on dnssec-bis-upd… W.C.A. Wijngaards
- Re: [dnsext] Design team report on dnssec-bis-upd… Anthony Iliopoulos
- Re: [dnsext] Design team report on dnssec-bis-upd… Samuel Weiler
- Re: [dnsext] Design team report on dnssec-bis-upd… Mark Andrews
- Re: [dnsext] Design team report on dnssec-bis-upd… Edward Lewis
- Re: [dnsext] Design team report on dnssec-bis-upd… Olafur Gudmundsson