[DNSOP] Re: [Ext] Re: [EXTERNAL] Re: Call for Adoption: draft-davies-internal-tld

David Conrad <drc@virtualized.org> Tue, 06 May 2025 00:11 UTC

Return-Path: <drc@virtualized.org>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 95092251858B for <dnsop@mail2.ietf.org>; Mon, 5 May 2025 17:11:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, MIME_HTML_MOSTLY=0.1, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=virtualized.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5-BYwaHTzHqY for <dnsop@mail2.ietf.org>; Mon, 5 May 2025 17:11:28 -0700 (PDT)
Received: from mail-24420.protonmail.ch (mail-24420.protonmail.ch [109.224.244.20]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 86063251856E for <dnsop@ietf.org>; Mon, 5 May 2025 17:11:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtualized.org; s=protonmail3; t=1746490287; x=1746749487; bh=LYVCh/JnZPd2vbbGiTKSLVyp1yBgqqsOt48+Yv83En4=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector:List-Unsubscribe:List-Unsubscribe-Post; b=kjoDM9BCS+N4z4WXSVcWsAMIcwT9nkFmoYQGuuadf60y43Z0af9ExH3YMr00UENYX RKDxchedrCi3gkqCs7Q9kQVNjlXJEkvDx+I6WJY95g5S5cDeE3//AD0JXHWX9DUZE1 bFJ0vtIOEOq6sFSkqQj8qqYQqJCbyIVVB4ns43jKC59nccJCQOiV6s1IpD88rWKxA4 uNBlJx250aef4+RgczIc+C2gsol7LioVAxaBvVlxDVDfK/yD46sB859Tvj85sRg+Gm ioyhqCO3OqrrOyvwr40scBxGyNnwfxH17La9GstXSIh5nONl4+FTTqRtWKDzPUeoVX DtBMDM/LqDrVw==
Date: Tue, 06 May 2025 00:11:21 +0000
To: Joe Abley <jabley@strandkip.nl>
From: David Conrad <drc@virtualized.org>
Message-ID: <FE00BF24-D21A-4BF1-94EA-3836B52921A6@virtualized.org>
In-Reply-To: <FB0CB987-C6ED-4F05-BA5B-280B0B682810@strandkip.nl>
References: <29bc304a-ea4f-44e4-a2da-4c4a58eaf7da@isc.org> <FB0CB987-C6ED-4F05-BA5B-280B0B682810@strandkip.nl>
Feedback-ID: 101327196:user:proton
X-Pm-Message-ID: fd0d4971a68ef4c05338f3ece10bc144d823f7ec
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="pgp-sha256"; boundary="------55f53a3ccaacd5c92f0f4ef529186064b814bba8315f1080141cef95641726c7"; charset="utf-8"
Message-ID-Hash: RIZQXGXFFBF34BBCAERCQZLVTZZCDTVJ
X-Message-ID-Hash: RIZQXGXFFBF34BBCAERCQZLVTZZCDTVJ
X-MailFrom: drc@virtualized.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Paul Hoffman <paul.hoffman@icann.org>, Ben Schwartz <bemasc=40meta.com@dmarc.ietf.org>, Roy Arends <roy@dnss.ec>, Philip Homburg <pch-dnsop-6@u-1.phicoh.com>, dnsop@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: [Ext] Re: [EXTERNAL] Re: Call for Adoption: draft-davies-internal-tld
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/0_iz-W1M1oHXgh95ad1epXoxGro>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

Joe,

On May 5, 2025, at 10:56 AM, Joe Abley <jabley@strandkip.nl> wrote:
> On 5 May 2025, at 16:58, Petr Špaček <pspacek@isc.org> wrote:
> 
>> I hear all of you, but do not comprehend.
>> 
>> Could you explain what are the differences between
>> - internal.
>> - home.arpa.
>> - 10.in-addr.arpa.
>> 
>> Please?
> 
> 1. Two of those domain names definitively exist in the public namespace. One does not.
> 2. Two of those domain names exist in a part of the namespace over which the IETF has control and authority; one does not.
> 3. Two of those domain names are implicated in IETF specifications; one is not.

Out of curiosity, do you think https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml should be limited only to protocols the IETF has "control and authority” and are “implicated in IETF specifications”?

> Another question, what is the difference between:

I’ll play!

> - internal.
> - corp.
> - oweifeowihfoihewfwe.
> - zz.
> 
> Possible answers:
> 1. Three of of those domain names will never exist in the public namespace by virtue of existing policy outside the IETF; one might.

Never is a very long time. Given ICANN’s recent action, it seems likely .internal will never exist in the public DNS.  However, some folks have argued that per RFC 1591, since ISO-3166/MA is seen as authoritative for what will become 2-letter TLDs, it is inappropriate to make assumptions about any 2-letter code.  Also, I’m unaware of any explicit statement that .corp will never be delegated, so this answer appears to be wrong.

> 2. Only two of them are apparently interesting enough to write an internet-draft about.

I can recall drafts about .internal, .corp, and .zz (well, ok, about the ISO-3166/MA reserved 2-letter codes), so this answer appears wrong.

> 3. Nothing, in the sense that none of them require any special handling by DNS servers or clients.

Since this thread has been discussing whether or not there needs to be special handling of .internal (e.g., DNSSEC goop), this answer appears to be wrong.

> 4. Nothing, in the sense that all of them require special handling by DNS servers or clients.

Without more info (e.g., ICANN declares "oweifeowihfoihewfwe“ an alias for ".internal”), I don’t see how “oweifeowihfoihewfwe” would require special handling, so this answer appears wrong.

> 5. Nothing; if the IETF has something to say about .internal, it should also have something to say about all the others.

I don’t see why the IETF should have anything to say about “oweifeowihfoihewfwe”, so this answer appears to be wrong.

My proposed answer:

Other than not being delegated in the public DNS, they are all different:

- One has been proposed for internal DNS scenarios by the party that is generally agreed to be the administrator of the top-level domain name namespace.
- One was used long ago in documentation for internal DNS scenarios by a large software company and is now argued to be too tainted for public use.
- One isn’t particularly special, other than maybe being a bit long.
- One is deemed to be under the authority of ISO-3166/MA due to RFC 1591, so no assumptions can be made about it.

In some cases, resolver operators, out of the goodness of their hearts, may have configured their resolvers to respond locally to queries including one or more of those TLDs because they heard rumors that they may be used for internal use, but they may not be sure where they heard that...

What do I win?

> I can no longer tell whether this is a serious reply or not.

I’m going to go with “not” here.

Regards,
-drc