IETF Logo Mail Archive

Re: [DNSOP] Fw: New Version Notification for draft-bellis-dns-recursive-discovery-00

Ray.Bellis@nominet.org.uk Tue, 20 October 2009 07:19 UTC

Return-Path: <Ray.Bellis@nominet.org.uk>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ABB3C3A6821 for <dnsop@core3.amsl.com>; Tue, 20 Oct 2009 00:19:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.248
X-Spam-Level:
X-Spam-Status: No, score=-5.248 tagged_above=-999 required=5 tests=[AWL=0.750, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XqgaBVqwDJIZ for <dnsop@core3.amsl.com>; Tue, 20 Oct 2009 00:19:07 -0700 (PDT)
Received: from mx4.nominet.org.uk (mx4.nominet.org.uk [213.248.199.24]) by core3.amsl.com (Postfix) with ESMTP id 3DFB03A67E7 for <dnsop@ietf.org>; Tue, 20 Oct 2009 00:19:06 -0700 (PDT)
DomainKey-Signature: s=main.dk.nominet.selector; d=nominet.org.uk; c=nofws; q=dns; h=X-IronPort-AV:Received:In-Reply-To:References:To:Cc: Subject:MIME-Version:X-Mailer:Message-ID:From:Date: X-MIMETrack:Content-Type; b=l9hRxDfdTFcnHJI7jRKN2nXbkMfbXDZVhv25hKcf6ifzYMRHIARUxkEf tnNDwPrRJLC5o1DHcvP8sZ0H1SrKMwW7W06J7h+pkJXxsghxQDRbVZz0q Igw1zjiAIAJDuvt;
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nominet.org.uk; i=Ray.Bellis@nominet.org.uk; q=dns/txt; s=main.dkim.nominet.selector; t=1256023155; x=1287559155; h=from:sender:reply-to:subject:date:message-id:to:cc: mime-version:content-transfer-encoding:content-id: content-description:resent-date:resent-from:resent-sender: resent-to:resent-cc:resent-message-id:in-reply-to: references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:list-owner:list-archive; z=From:=20Ray.Bellis@nominet.org.uk|Subject:=20Re:=20[DNSO P]=20Fw:=20New=20Version=20Notification=20for=0D=0A=20dra ft-bellis-dns-recursive-discovery-00|Date:=20Tue,=2020=20 Oct=202009=2008:19:12=20+0100|Message-ID:=20<OF73A48C49.A 59DD889-ON80257655.0027D434-80257655.002835C8@nominet.org .uk>|To:=20Florian=20Weimer=20<fweimer@bfk.de>|Cc:=20dnso p@ietf.org|MIME-Version:=201.0|In-Reply-To:=20<82skde36c9 .fsf@mid.bfk.de>|References:=20<OFA656600E.F5229B3D-ON802 57650.005247BF-80257650.00527644@nominet.org.uk>=20<82skd e36c9.fsf@mid.bfk.de>; bh=+3wJo9Ignlz02waJ/rkTmAq5PB0lriKLMhm8ieq9P6E=; b=LwRqo2i0odce3lfnJnByxqAUeY0txWvKDhuvmzb8ktowNyjexyvGcEK7 FW+2FByB7BITrZkZIZEj98ekjw9k5/pbGcMHr/6QASiX+yrUIphnXf66H 2g9Z/n/yvmwLGPt;
X-IronPort-AV: E=Sophos;i="4.44,590,1249254000"; d="scan'208";a="13765809"
Received: from notes1.nominet.org.uk ([213.248.197.128]) by mx4.nominet.org.uk with ESMTP; 20 Oct 2009 08:19:13 +0100
In-Reply-To: <82skde36c9.fsf@mid.bfk.de>
References: <OFA656600E.F5229B3D-ON80257650.005247BF-80257650.00527644@nominet.org.uk> <82skde36c9.fsf@mid.bfk.de>
To: Florian Weimer <fweimer@bfk.de>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 8.5 December 05, 2008
Message-ID: <OF73A48C49.A59DD889-ON80257655.0027D434-80257655.002835C8@nominet.org.uk>
From: Ray.Bellis@nominet.org.uk
Date: Tue, 20 Oct 2009 08:19:12 +0100
X-MIMETrack: Serialize by Router on notes1/Nominet(Release 7.0.1FP1 | May 25, 2006) at 20/10/2009 08:19:12 AM, Serialize complete at 20/10/2009 08:19:12 AM
Content-Type: multipart/alternative; boundary="=_alternative 002835C680257655_="
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] Fw: New Version Notification for draft-bellis-dns-recursive-discovery-00
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Oct 2009 07:19:08 -0000

> This will work for a short time only because those proxies will likely
> be changed to return their own address for DOMAIN.LOCAL.ARPA.

The draft specifically prohibits this.  Of course vendors _do_ ignore 
RFCs, otherwise this draft wouldn't be necessary.  However we'd be in a 
good position to name and shame any vendor whose proxies intentionally 
serve LOCAL.ARPA in defiance of the standard.

> You cannot rely on a NXDOMAIN response for DOMAIN.LOCAL.ARPA when the
> resolver does not support this protocol due to widespread DNS
> poisoning.

Hmm - given the need to protect this query a nonce prefix may be a useful 
addition.  That requires more thought...

> I wholeheartedly support the creation of LOCAL.ARPA, though.  But you
> should mention that mDNS MUST NOT be used for LOCAL.ARPA (so that some
> people don't get funny ideas).

OK, I'll consult with Stuart on mDNS and it's interaction (or otherwise) 
with this.

thanks,

Ray

v2.28.0 | Report a Bug | By Email | System Status