Re: [DNSOP] [internet-drafts@ietf.org: I-D Action: draft-grothoff-iesg-special-use-p2p-names-00.txt]

Ted Lemon <ted.lemon@nominum.com> Mon, 02 December 2013 17:45 UTC

Return-Path: <Ted.Lemon@nominum.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 686FB1AC4A3 for <dnsop@ietfa.amsl.com>; Mon, 2 Dec 2013 09:45:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ltTGNRSK1WrH for <dnsop@ietfa.amsl.com>; Mon, 2 Dec 2013 09:44:58 -0800 (PST)
Received: from exprod7og125.obsmtp.com (exprod7og125.obsmtp.com [64.18.2.28]) by ietfa.amsl.com (Postfix) with ESMTP id 171BD1A8032 for <dnsop@ietf.org>; Mon, 2 Dec 2013 09:44:58 -0800 (PST)
Received: from shell-too.nominum.com ([64.89.228.229]) (using TLSv1) by exprod7ob125.postini.com ([64.18.6.12]) with SMTP ID DSNKUpzHFyeRFbdguWQHL3nRu8y4bDgW+jxv@postini.com; Mon, 02 Dec 2013 09:44:56 PST
Received: from archivist.nominum.com (archivist.nominum.com [64.89.228.108]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by shell-too.nominum.com (Postfix) with ESMTP id 82F091B8292 for <dnsop@ietf.org>; Mon, 2 Dec 2013 09:44:55 -0800 (PST)
Received: from webmail.nominum.com (cas-01.win.nominum.com [64.89.228.131]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "mail.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by archivist.nominum.com (Postfix) with ESMTP id 68F4E190043; Mon, 2 Dec 2013 09:44:55 -0800 (PST)
Received: from [10.0.10.40] (192.168.1.10) by CAS-01.WIN.NOMINUM.COM (192.168.1.100) with Microsoft SMTP Server (TLS) id 14.3.158.1; Mon, 2 Dec 2013 09:44:55 -0800
Content-Type: text/plain; charset="windows-1252"
MIME-Version: 1.0 (Mac OS X Mail 7.0 \(1822\))
From: Ted Lemon <ted.lemon@nominum.com>
In-Reply-To: <E1954338A5D3418BBA8594A8330C7BCD@hopcount.ca>
Date: Mon, 2 Dec 2013 12:44:48 -0500
Content-Transfer-Encoding: quoted-printable
Message-ID: <1132353B-91FC-4133-9B0B-F4A00A8A2A66@nominum.com>
References: <20131201164841.GB12135@sources.org> <BF87877A-8989-4AA4-9ED1-52C82E1BC538@nominum.com> <alpine.LFD.2.10.1312011206480.12923@bofh.nohats.ca> <20131202151651.GD16808@mx1.yitter.info> <D5954219-E22D-44C4-9DE9-3DCA77545264@nominum.com> <E1954338A5D3418BBA8594A8330C7BCD@hopcount.ca>
To: Joe Abley <jabley@hopcount.ca>
X-Mailer: Apple Mail (2.1822)
X-Originating-IP: [192.168.1.10]
Cc: dnsop WG <dnsop@ietf.org>
Subject: Re: [DNSOP] [internet-drafts@ietf.org: I-D Action: draft-grothoff-iesg-special-use-p2p-names-00.txt]
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Dec 2013 17:45:00 -0000

On Dec 2, 2013, at 11:29 AM, Joe Abley <jabley@hopcount.ca> wrote:
>> RFC 6761 has IETF consensus, and does not propose adding new namespaces under .arpa, but rather at the top level. Here's what RFC3172 says on the topic of .arpa:
>> 
>> This domain is termed an "infrastructure domain", as its role is to
>> support the operating infrastructure of the Internet. In particular,
>> the "arpa" domain is not to be used in the same manner (e.g., for
>> naming hosts) as other generic Top Level Domains are commonly used.
> 
> Perhaps 3172 needs to be updated to reflect current IAB practice, then. It's not hard to find examples of names under ARPA which contradict the text you quoted (e.g. see RFC 5855).

This seems like a non-sequitur, since RFC 5855 refers to a function that RFC 3172 specifically mentions.

>> Aside from the purely practical matter that having special domains live under .arpa would be more complicated to implement,
> 
> This feels like an over-general pronouncement that can't hope to be accurate in all cases. Why is it more complicated in the general case? More complicated than what?

If special-use names are at the top, then you can just look at the terminal label to see that you need to use a different protocol to resolve names under the special-use name.   If special-use names are not at the top, then you have to have special code that grovels through the labels doing pattern matches.   This is clearly more code; you can argue that it's not much more code, but I think there's a reason why apple chose not to use local.apple.com, for example.

Aside from the additional implementation complexity, putting these domains under some other TLD makes them longer to type.   In the case of domains that are not intended to be typed, this isn't a problem, of course.

>> it doesn't make sense. Consider .local—our main example of a special-use domain. Would it make sense for .local to be under .arpa? I don't think so. .local is specifically not "internet infrastructure." It isn't even DNS. It's an escape from the DNS namespace, with different semantics than domain names in the DNS.
> 
> I think you're sharing personal opinion rather than citing fact ("make sense"). The .local convention happened to be adopted by Apple for use in a DNS-like protocol, and was documented (and the IN-class top-level label reserved) later. They could equally well have adopted .local.arpa or .local.apple.com.

So, in what sense is MDNS "internet infrastrucure?"

> I'm not complaining about Apple's innovation here, or their decision to document it at the IETF. But I don't think it's sufficient to assert that alternatives would not have made sense without justifying why that is so.

No argument here, but I thought that's what I was doing.

>> The other proposed special uses are similar. Putting them under .arpa might be _expedient_, because it avoids the whole change control question, but that's pretty much the only way I can think of that it makes sense.
> 
> It doesn't avoid the whole change control question -- it just reduces the change control to one with a single, uncontentious decision point (the IAB). By contrast, the business of identifying reserved strings (and enforcing their non-delegation for other purposes) in the root zone is fraught with administrative ambiguity.

It's not at all clear to me that this is an issue, and if it is, we should figure that out.   I would like to think that ICANN understands that there is a change control conflict here, and is willing to work with us to make sure that we don't step on each other's toes.   Clearly it's incumbent upon the IETF not to be frivolous in the use of RFC 6761.   But I have not heard from anyone that the IETF should not ever use RFC 6761, and that seems to be the position you are advocating at the moment.