Return-Path: <peter@desec.io>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1])
	by mail2.ietf.org (Postfix) with ESMTP id DDBE2F184D7A;
	Wed, 20 May 2026 04:41:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1;
	t=1779277304; bh=G/30Vm9RDp+z0NsfQPIogVkFAItYtWD4qXs8QYPPn1o=;
	h=Date:Subject:To:Cc:References:From:In-Reply-To;
	b=oU0i4saisSyih5YCMs7zMbAMAxrjlSn+O03GjbnDY9Om467Np8/w23BsyrRERyZHQ
	 ecGkUL6CGQte0FzwX4WUhETspuBHWH06A6IOwE1M9wVGt9xHkjqyaflgAGWGX4UDR+
	 0Ai/pGypDsO49gAPzaYz0ewNeScNU78IZpMhZZtU=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.8
X-Spam-Level: 
X-Spam-Status: No, score=-2.8 tagged_above=-999 required=5
	tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
	DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7,
	SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key)
	header.d=desec.io
Received: from mail2.ietf.org ([166.84.6.31])
	by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id vedrqluPw4yT; Wed, 20 May 2026 04:41:41 -0700 (PDT)
Received: from mail.a4a.de (mail.a4a.de [IPv6:2a01:4f8:10a:1d5c:8000::8])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest
 SHA256)
	(No client certificate requested)
	by mail2.ietf.org (Postfix) with ESMTPS id 12BA4F184CB8;
	Wed, 20 May 2026 04:40:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=desec.io;
	s=20170825; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:From:
	References:Cc:To:Subject:MIME-Version:Date:Message-ID:Sender:Reply-To:
	Content-ID:Content-Description:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=GmZbvWSuyBLQhwVjsZSLHYUXF0fB2bnaFBdUraVDzZc=; b=wxKAKblm24pQyHuDHF+6AAMUcj
	dWmdcR57VNggF+luMtHJP/XyoMgNDIBbTGxpFJM6rduKic8P+tYWvDrqc4I+BSpNZauwXuYLUHuQK
	za8suJsf1CfIj6CsoPDQ9Gs6cAQrnw9/7AVzLepw9N2nrlDF7Eoq3tui3UfGE689hJ12LjvAKWbnn
	iLhpAGuEpKGySlyIaLBBWrBlLKfbZ461Hz3G5HLFYaLHP2dvmzvCP8EM87PGd9BFNsVjUus+iL556
	EV7EaBlnEbTS3J2WXQECF8GQPom42Ic9sJIhqAZgCnoaO3yRSgCvLk7et2yTNvY4KZkuxZ4G2OiFJ
	u3iRREmQ==;
Received: from [2001:9e8:16d1:ee00:9e13:dab2:dd60:57c5]
	by mail.a4a.de with esmtpsa  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.97)
	(envelope-from <peter@desec.io>)
	id 1wPfIF-0000000DAep-1xqb;
	Wed, 20 May 2026 13:40:55 +0200
Message-ID: <84debac0-025c-41f8-a667-1d78a2e4fedd@desec.io>
Date: Wed, 20 May 2026 13:40:54 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: =?UTF-8?Q?=C3=89ric_Vyncke?= <evyncke@cisco.com>, The IESG <iesg@ietf.org>
References: 
 <177926148741.584.15344642241896667015@dt-datatracker-7688897f84-hmm7m>
Content-Language: en-US, de-DE
From: Peter Thomassen <peter@desec.io>
Autocrypt: addr=peter@desec.io; keydata=
 xsFNBFRjVn0BEADXqtra70yxQrT4MQ9DEhN0mxG6XRAOHE6nP18mqxwSlcET7D6w+z3h4ole
 v0tyvUU02c2wg04X8WVfjoHnAvIa1dfUcNpB1+QmfFsw0xIJlbT1ogHkMiPQqR4ChDvE3ND/
 6YCS5+HT6hY+tfU+hpLsKw4l+u1Pg2NPVLYosET1jU84b7xhFnoicnCV3kUNltLtxLKSBAfk
 AXtp1AWWKJbfCr3y0qKElMriicoe5DUZfLrZK2iPcWBxh+n7KMO2g7aqx3aQqwW1+S7Sq7Is
 l6iSurYfIcHb4AfUy4o5nPB8kKACR6BuJmkEQ5WLuTGruWA2fcxaNpICmolMinTzW1CrIjgN
 PoskMYCNIZ2uWxS6LN8hBiGCRL4h9aL4wuT09SvR13oAPI1HD5ph+mH6wD37/ONBXrdjcFNb
 1l/uVkHU/SwwcKDJOsX18T60Ao00fciTbFHgmKtFube0xGK/vjh461TyU+xKD8Orvyeovvxy
 MzCwM3UVq/dkdG2Ys/7Qy/4bUC1nJEwKlLv7ZTdtSckdoU2M6JpPX6i4KDB2YCMbwtqJ842z
 8A/UuE2bL9aDimh/sF8WgPIhlxqF1STNqW1JTIbDPv8HeZnM4nyJOUWStj4uRiETQhBClPLz
 YWtnR+EUsfbSLy81vfupbMqRasDlt6aASobgn+K7Rb1Xs/mDnwARAQABzSBQZXRlciBUaG9t
 YXNzZW4gPHBldGVyQGRlc2VjLmlvPsLBeAQTAQIAIgUCVGNWfQIbIwYLCQgHAwIGFQgCCQoL
 BBYCAwECHgECF4AACgkQ79YUOj7yLS88Dg//SbHnFGrtaImEiM69wyj4GzWnuGk9/upCym/R
 RzdBALCYHU9FUFFHwusiO9A0pnO8qv/GEtqqTHrcL205a6FTivkdZmOsWuN4oo7r4HBc/taI
 FLLUDg2wd8q4m4387sYEqrc3olGfyRB6hrMtEWVJLXHJmpcrxAaI1F2QO4Bu7kcdTnyGFz/p
 ZD8XAof2TWHqJb2ux69DFhiAJeAZlV+h9QrxTedL84l4hq3x1VWsnOEFaCJiThDX920kTnhJ
 ijrDocgAbmQBCniPACpPHYhBhmCJxfVqgfMuLMNsukOmKxsGcGV6rO1zB5ZUhm3O/Ixk6ow3
 6FDKALWihg6Z4P/cJYySMn0iqvHkO8ryT9oJKX//mKaYoF6henXDRLCcRjKwGxFQTEgX+6yc
 pjgvX3rlypjkPT5ho4yEc5ePkQ2gIIHhvZburm1Zr4nDPx6v8+3XUjpXBRTWQ8/0/h0rtLJe
 yOPwGJxcfKf/GutTCqiio0mS01mIY9c2i7JWcljlIuSEUit6CHotc5lBOm2GJwguRJG6cXPY
 SQecwBdcjH3RTzBOv/DN6xWAIV7BmbX/e7DSGAc60mBO1/M0ut+a6CkxRQK8TaE3B3zh1/QO
 nG0XvtZfIY8ZYdTrdEDSV1Pj5pof/fqhhegHRxN2qi4qIuVcrW0jsUsx10IgAynHR7qQKsvO
 wU0EVGNWfQEQAPBA8iPCS4ZRX8stW0WuW7579axSq/Luyik4MWDFalt68lzvUbV0f6faN15+
 aV7VwMTw3rSa2tP0U8crYAAAZ5NrRHXlYms5BK9vsi1322dAvhyNRawdprP627SO+Ez/84tY
 xz1X3M9esbN7gpJtHP6mHW76zYpT447v6c2qlbldjobZTDb6kKSGFCIrPJz9M4jVfya+ovxe
 2Ab7hn2R0CcyMHATV5g1Ry0XXaj5y3bWypActbG9nflRn3NjhHZynu+WEPDUJCO8kNVNYKOw
 HObNTeaLvgvU0ONB8pYJv35kDXMhZLwo5MJuJd5i54CXwpo9mECwLJT1RpJi7u98nBrWyyaH
 s2brG9LPCRKBKOhiHFu57H+cElh+kOvehuS7DFTzjqDwJlkQzP5Hq0G++hZxfdYocKdcdFoh
 RP3dtDAe+Lfiy9qzJicZ6ACbzoQIN58xj0VWAn1W7SuMErOjv84D/FiXHD2Kxtx09wQl8vH0
 Nbh9UgyDBNupToM0ixT+8Ko8eBuYHR53RPxshQhFw4EMIhXiOaxNe1W2Z95QPnYhUGOMoy3I
 v4fxMQUHa4kZSF2qxsFB1Cxol/aBPGwkwoqUvzp23pLQtJ6youYXtLgvx3pR4L52Q5CUzHMa
 HvM67XWgW1KqtnvNBXN9PwtDz/a9fQX1YO4CegrXv8C9Ro+LABEBAAHCwV8EGAECAAkFAlRj
 Vn0CGwwACgkQ79YUOj7yLS8rXA/9EGX2QRfJS94JTdtseu7saTK9a3IKwk6E33GpfXyUVpMt
 sOqV756XQwULZSWoxInRQtWojA8pQxDUYrbA4MpX0Efr2Dx1xIsJ5F3JajOqViB1SbOD2m0f
 bxXbcoWKitsKoag2SlvNOd8rD9FcgDvrkacnaQZcZE8DyyGx0JU451tfoD/igu85NZpTDaWG
 6fth7QRlxmdGWrGXRdXAP29jq1n0I1wIyF/bXlZ7MXjOSsfyPddzsnHFTvNMZKps0QXNF+hi
 ESg9chIeo/IFDDVu6pCtm6mftojx84rczTZiNk8r2T3TU4N8uwWtXn/nj9xd61pnxD0xkTPH
 zxJrCs59WSfYqj3aFNkWO3Lg0/HGnO9wHQKMXcGPsnKITHVzxCNBQtVHomNA7ds6Kt3/WJgS
 pU2ciICvrpvKgPNWQ0d/SeY3vYIRvDLZ12Svx6M3eXDrsgZOT5be7kGVr3t7dBOYKcRHkZUq
 kU1kCcgp0vetISVDOc5fkpdUkAtd5/13pIpz4ikVR3OM4Br4XMVShm6RvoP4pyA+ftCi1+bw
 0UbRCrnHgnG+wtCf5nMDGVLc04vITnII+ESZqlF02a1IFj0Z2MuQK2Oszl2Nsx/LG60G1e/R
 pzKEXIIJgHfbwUCWtV1zQu6v9Ng5H8EqVeWcdaPUwSQMGcDg/sPa4s/OxhgrYBg=
In-Reply-To: 
 <177926148741.584.15344642241896667015@dt-datatracker-7688897f84-hmm7m>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Message-ID-Hash: 4ALSQTLZL6TASS7CJ3COPJQJSRFUVRIF
X-Message-ID-Hash: 4ALSQTLZL6TASS7CJ3COPJQJSRFUVRIF
X-MailFrom: peter@desec.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
CC: dnsop-chairs@ietf.org, dnsop@ietf.org,
 draft-ietf-dnsop-ds-automation@ietf.org, james@policywonk.xyz
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5BDNSOP=5D_Re=3A_=C3=89ric_Vyncke=27s_No_Objection_on_draft-ietf-?=
	=?utf-8?q?dnsop-ds-automation-08=3A_=28with_COMMENT=29?=
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/dnsop/2FIAZ54NbMdlrAEmirxGvb7kt04>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

Hi Éric,

Thank you for your review!

On 5/20/26 09:18, Éric Vyncke via Datatracker wrote:
> ## COMMENTS (non-blocking)
> 
> ### Andy's DISCUSS
> 
> I second Andy Newton's DISCUSS point about the use of `SHOULD` vs. `MUST`. The
> sentence in section 3 is not enough IMHO `However, not following any
> requirements designated with the "SHOULD" key word will generally lead to
> undesirable effects of ambiguity and interoperability issues.`

Andy has proposed improved wording: https://mailarchive.ietf.org/arch/msg/dnsop/X2bmBcl8Bx6sBRts8fc_U5mKxdE/ Unless I hear back, I'll assume you're OK with that.

> The use of BCP14 is also questionable as it is not really about interoperation.
> E.g., section 4.2.2 contains `The reduction should be in effect at least for a
> couple of days` still providing guidance to the operators without the use of
> BCP14. Same for section 5.2, which has no BCP14 and still useful.

The reason for this is as follows: Sections *.1 are the recommendations sections and sections *.2 contain analysis and rationale. Sections *.1 are compiled verbatim into Appendix A so you can find all the recommendations relevant for DS automation interoperability by just look at the Appendix, as a handy implementation reference.

The recommendations sections therefore contain the distilled core of the recommendations. The particular case you quote ("The reduction should be in effect at least for a couple of days") is a very qualitative statement, and in my view not an interoperability statement that would really add to what the corresponding recommendation 4.1.2 says; it rather provides additional context.

In case this doesn't clarify the issue, feel free to re-raise and we can see together what to do about it.

> See also next issue.
> 
> ### BCP status
> 
> Linked to Andy's DISCUSS, whether this document is BCP or 'informational' is
> also another question. Some BCP-like RFC (e.g., RFC 9099) are informational and
> do not rely on BCP14, only plain English "should".

I don't see Andy raising a question about the document status.

Roman was concerned; we've attempted to address that (pending his feedback) by ensuring that defining recommendations are MUST, not SHOULD (which indeed was an error).

For extra context on the BCP status, please see the shepherd write-up.

Thanks,
Peter

