Re: [DNSOP] Interim DNSOP WG meeting on Special Use Names: some reading material

Warren Kumari <warren@kumari.net> Tue, 12 May 2015 13:12 UTC

Return-Path: <warren@kumari.net>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7D2E1B2C80 for <dnsop@ietfa.amsl.com>; Tue, 12 May 2015 06:12:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.978
X-Spam-Level:
X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kYGmLypycfHA for <dnsop@ietfa.amsl.com>; Tue, 12 May 2015 06:12:20 -0700 (PDT)
Received: from mail-wg0-f51.google.com (mail-wg0-f51.google.com [74.125.82.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 731A91B2C7E for <dnsop@ietf.org>; Tue, 12 May 2015 06:12:20 -0700 (PDT)
Received: by wgin8 with SMTP id n8so9384684wgi.0 for <dnsop@ietf.org>; Tue, 12 May 2015 06:12:19 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=t7bfy6m75xXm1thtmaCUqFLm7k//x/o7+oEBotDpnXI=; b=VKrNyLTkk4SxAuvC5N0EewanM8pzziLVySOGqGDgrMox87ZSBuvwlu4eLBlxPLm2RW j6Ycdosx3fZtuZW0PxljuLzOUT80v1tbBruQfG273PkTngK12unj+BDK3jrgFRGYdYUV 42W3xjpBNhCILomGcJhR6O/Bi5XwNmMvBbsBvGdr5387nq1m3bQ2iLIPDXswOEl4yONe ApSVl9RiY9ju0dxn7GHFI319U/gd9BrBQPd3G1vWahU8bE2BuROFpfLqPzOOrQXGrLfe EMaLjD0+5dzzML9LjMBr02t7+oXzsBc13PMZkly/ZoY54Zsb7sieb5/+IXwel38sPrzD 7sPw==
X-Gm-Message-State: ALoCoQnPO7VSDO2AHDurDeNKx3XXLBUTCw7qNSoNHLnlz5jpcACwu0XPrCOkB5+pqxhdqIEaePIe
MIME-Version: 1.0
X-Received: by 10.194.60.67 with SMTP id f3mr30283511wjr.28.1431436338997; Tue, 12 May 2015 06:12:18 -0700 (PDT)
Received: by 10.194.47.36 with HTTP; Tue, 12 May 2015 06:12:18 -0700 (PDT)
In-Reply-To: <62970575-A605-4B3E-9E98-D760B47E8532@isoc.org>
References: <20150508193400.55273.qmail@ary.lan> <FF464258-0C33-45CC-A684-BAB7BCE8A8FB@gmail.com> <alpine.OSX.2.11.1505082118060.31363@ary.lan> <0902600F-134B-4688-9CDD-1ACB23431DDE@vpnc.org> <20150512010624.GC74841@mx2.yitter.info> <62970575-A605-4B3E-9E98-D760B47E8532@isoc.org>
Date: Tue, 12 May 2015 15:12:18 +0200
Message-ID: <CAHw9_i+jpobNKtim=Gw3ZAjaU6ff3A-SHVrGHqn0AW7-WOwsNQ@mail.gmail.com>
From: Warren Kumari <warren@kumari.net>
To: Dan York <york@isoc.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/3FSCqoL9eS-Xk-AriA7n6jdxLac>
Cc: "dnsop@ietf.org" <dnsop@ietf.org>, Andrew Sullivan <ajs@anvilwalrusden.com>
Subject: Re: [DNSOP] Interim DNSOP WG meeting on Special Use Names: some reading material
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 May 2015 13:12:22 -0000

On Tue, May 12, 2015 at 2:49 PM, Dan York <york@isoc.org> wrote:
> I’ve been reading this whole discussion with great interest over the past while and do intend on joining today’s call.  In the midst of all of this I think two points from Andrew and Ed have been helpful to my thinking:
>
>> On May 11, 2015, at 9:06 PM, Andrew Sullivan <ajs@anvilwalrusden.com> wrote:
>>
>> It seems to me that making new reservations solely on _policy_ grounds
>> is overstepping our role, because we actually gave that management
>> function away to someone else many years ago.  But if there are
>> additional protocol-shift registrations, it would be appropriate to do
>> that.
>
> I’m not sure I’m 100% on board with Andrew’s use of the term “protocol-shift” to explain the difference, but I do agree with his statement that reservations should not be made based *solely* on policy grounds and that there needs to be some true protocol-based reason for the reservation.
>
> Even better, I like Ed’s distinction:
>
>> On May 9, 2015, at 7:29 AM, Edward Lewis <edward.lewis@icann.org> wrote:
>>
>> The problem (the topic of discussion here) I see is that there are class
>> of strings that are intended to not be active in the DNS and further more,
>> the DNS isn't even meant to be consulted.
>
>
> This to me is the key point.  Reserving names like .ONION makes sense to me because there is existing Internet infrastructure that is widely deployed and uses that TLD-like-name in its operation…. but has no expectation that the name would be active in DNS.   Were such a TLD ever to be delegated in DNS, it could conceivably *break* these existing services and applications.   Those are the kind of names that make sense to be reserved.
>
> I do realize that there is a challenge with determining when something is “widely deployed” enough to merit this consideration.  Just because I may have some service I created that uses a pseudo-TLD of “.YYY”[1] probably doesn’t really rise to the level if only I and 5 other friends use it.  What number makes sense?  I don’t know because as others have commented such numbers can be easy to game with automated scripts, bots, etc.

... and this is some of the point of the .ALT pseudo-TLD -- if you
want to use a "TLD" that does not get resolved in the DNS, make your
namespace look like YYY.ALT. This *will* leak into the DNS, but should
be "dropped" (NXD) at the first resolver (helping with privacy and
general pollution issues). Now, if 5 people or 5,000,000 people use
it, it doesn't matter -- it never needs to be made a special use name,
because it isn't really in the DNS name space.


> My 2 cents,
> Dan  (as an individual, not as any statement from ISOC)
>
> [1] I was going to use “.FOO” here but of course someone (Google, in this case, maybe at Warren’s request!)

Good gods no. Them's fighting words. Take that back....

:-P
W

> did actually register .FOO through the newgTLD process.


>
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf