IETF Logo Mail Archive

[dnsext] Re: need new flag bit in EDNS, "do me no favours" (DMNF)

David Conrad <drc@virtualized.org> Wed, 27 October 2010 05:04 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E2B103A684C; Tue, 26 Oct 2010 22:04:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.753
X-Spam-Level:
X-Spam-Status: No, score=-2.753 tagged_above=-999 required=5 tests=[AWL=-0.154, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cT-D-gPfce3C; Tue, 26 Oct 2010 22:04:11 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id D8FE13A683B; Tue, 26 Oct 2010 22:04:10 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.72 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1PAy9g-0004s5-4o for namedroppers-data0@psg.com; Wed, 27 Oct 2010 05:02:32 +0000
Received: from trantor.virtualized.org ([204.152.189.190] helo=virtualized.org) by psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from <drc@virtualized.org>) id 1PAy9d-0004rv-Nd for namedroppers@ops.ietf.org; Wed, 27 Oct 2010 05:02:29 +0000
Received: from localhost (localhost [127.0.0.1]) by virtualized.org (Postfix) with ESMTP id 44E30EE7CE5; Tue, 26 Oct 2010 22:02:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at virtualized.org
Received: from virtualized.org ([127.0.0.1]) by localhost (trantor.virtualized.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LkpQDMay4JHv; Tue, 26 Oct 2010 22:02:27 -0700 (PDT)
Received: from [10.0.1.7] (cpe-70-95-123-210.hawaii.res.rr.com [70.95.123.210]) by virtualized.org (Postfix) with ESMTP id BBE05EE7CDA; Tue, 26 Oct 2010 22:02:26 -0700 (PDT)
Subject: [dnsext] Re: need new flag bit in EDNS, "do me no favours" (DMNF)
Mime-Version: 1.0 (Apple Message framework v1081)
Content-Type: text/plain; charset="us-ascii"
From: David Conrad <drc@virtualized.org>
In-Reply-To: <20101026071421.GA5959@nic.fr>
Date: Tue, 26 Oct 2010 19:02:20 -1000
Cc: namedroppers@ops.ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <A9D8C913-ED39-4B6F-B049-433208D6490D@virtualized.org>
References: <59023.1287939121@nsa.vix.com> <20101025094523.GA5187@nic.fr> <177837CD-AA25-4997-BA4B-B4206E508BEE@virtualized.org> <20101026071421.GA5959@nic.fr>
To: Stephane Bortzmeyer <bortzmeyer@nic.fr>
X-Mailer: Apple Mail (2.1081)
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On Oct 25, 2010, at 9:14 PM, Stephane Bortzmeyer wrote:
> So do you suggest that, since DNS lies are presently common, we
> should accept the fact that the semantics of the DNS changed (by
> arm-twisting, not by bottom-up, transparent, open, IETF process), and
> we now have to explicitely ask for the truth?

One could argue the market choice of accepting redirection is more bottom up than what a bunch of DNS geeks thinks is a good idea, but I won't :-).

The reality is that the vast majority of folks behind redirection either have no clue they are being subject to "lies" or they actually prefer it.  A bit in a stub-to-resolver packet requesting the resolver not muck with the response seems like a reasonable way for the minority to request a preference via the DNS that corresponds to the various redirecting operators' "opt out" mechanisms. Of course, resolver operators are free to disregard such a request (e.g., if they are required to redirect for legal reasons or whatever) so this isn't a perfect solution, but I figure it'd be useful...

Regards,
-drc

v2.23.0 | Report a Bug | By Email