Re: [dnsext] getting people to use new RRTYPEs

[Douglas Otis <[e-mail]>]

On Apr 25, 2013, at 9:23 PM, Doug Barton <[e-mail]> wrote:

> On 04/25/2013 08:43 PM, John Levine wrote:
>>>> 1. Insert the ability into the interface to add freeform stuff
>>>> 2. Run the equivalent of named-checkzone prior to committing the change
>>>> 3. Profit!
>> 
>> I don't know whether to laugh or cry.
>> 
>> No, this won't work with provisioning systems in the real world, that
>> have to be usable by people who are not DNS weenies, and work in
>> systems where the software upgrade cycle is months or years, not days.
> 
> Once again, I know that you want to promote your solution for this problem. That's fine, but that doesn't mean that it's the only solution, or even the best one. What I proposed would work "forever." There is no doubt that it requires more DNS knowledge, but most non-experts entering "special" or "custom" DNS are doing cut and paste anyway.

Doug,

To be fair, a significant barrier was the Windows corporate environment translating DNS to RPC with a limited template set.  As it turns out, use of the SPF protocol at the MUA is fairly limited.  While overlaying TXT RR is bad, these also offer policy for any domain or subdomain.  Some may simply wildcard TXT records and create problems for other protocols using these records.  One of the original motivations for overlaying TXT was to permit wildcard use.

IMHO, the high overhead associated with the SPF scheme as IPv6 is deployed seems to ensure a more scalable and safer cryptograph scheme is a likely replacement using standard RRs.  Nothing needed for IPv6 is really being solved using SPF or DKIM.  Currently DKIM is easily spoofed just as Hector demonstrated many years ago.  Few providers are willing to discard based upon SPF failures, but limit use to vetting NDNs.  Many providers unwilling to run macro expansions should have cause this dangerous scheme to have been discarded long before the type 99 resource allocation based upon the same sort of justifications. 

Regards,
Douglas Otis