IETF Logo Mail Archive

Re: [DNSOP] Alias mode processing in auths for draft-ietf-dnsop-svcb-https-01

Tony Finch <dot@dotat.at> Tue, 11 August 2020 22:38 UTC

Return-Path: <dot@dotat.at>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A97D3A0D64; Tue, 11 Aug 2020 15:38:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uW2gSYtGw5ix; Tue, 11 Aug 2020 15:38:08 -0700 (PDT)
Received: from ppsw-33.csi.cam.ac.uk (ppsw-33.csi.cam.ac.uk [131.111.8.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B82713A0D58; Tue, 11 Aug 2020 15:38:08 -0700 (PDT)
X-Cam-AntiVirus: no malware found
X-Cam-ScannerInfo: http://help.uis.cam.ac.uk/email-scanner-virus
Received: from grey.csi.cam.ac.uk ([131.111.57.57]:53842) by ppsw-33.csi.cam.ac.uk (ppsw.cam.ac.uk [131.111.8.137]:25) with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) id 1k5cuF-0006zc-gk (Exim 4.92.3) (return-path <dot@dotat.at>); Tue, 11 Aug 2020 23:38:07 +0100
Date: Tue, 11 Aug 2020 23:38:07 +0100
From: Tony Finch <dot@dotat.at>
To: Ben Schwartz <bemasc=40google.com@dmarc.ietf.org>
cc: Brian Dickson <brian.peter.dickson@gmail.com>, dnsop <dnsop@ietf.org>, Pieter Lexis <pieter.lexis@powerdns.com>
In-Reply-To: <CAHbrMsD8e0mXER0-R7YmjR6GR6kP4rwdoL3uJcB83GPt+XgHcA@mail.gmail.com>
Message-ID: <alpine.DEB.2.20.2008112319240.21650@grey.csi.cam.ac.uk>
References: <00cfd965-bf69-d1cb-2df3-1a9bb110d7e0@powerdns.com> <CAHbrMsAJ-cbcW3v4T34f8-gzgzgHSkoBO545_Y3N8D6rof7Nmw@mail.gmail.com> <CAH1iCipZ25XaES0C4MFt3+aOm=d1U5LKigJe5AwKUWG-+yETFw@mail.gmail.com> <alpine.DEB.2.20.2008102304160.21650@grey.csi.cam.ac.uk> <CAHbrMsCePLp=vaw3fgf611TfnFpeUaV3xkCT5BSH3yzu-XZ1rg@mail.gmail.com> <alpine.DEB.2.20.2008112129160.21650@grey.csi.cam.ac.uk> <CAHbrMsBPyrgbbjx0_-w2Ysky63edtw3kKEBu7DrgDCfP_-GBBw@mail.gmail.com> <CAH1iCioL1JrCHo2yuu-90dy4MpRfwUF9iaK-S=NdaXRtvyteXA@mail.gmail.com> <CAHbrMsD8e0mXER0-R7YmjR6GR6kP4rwdoL3uJcB83GPt+XgHcA@mail.gmail.com>
User-Agent: Alpine 2.20 (DEB 67 2015-01-07)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/3nTfRfuehqnDLwXOORQKk68dA7A>
Subject: Re: [DNSOP] Alias mode processing in auths for draft-ietf-dnsop-svcb-https-01
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Aug 2020 22:38:11 -0000

Ben Schwartz <bemasc=40google.com@dmarc.ietf.org> wrote:
> On Tue, Aug 11, 2020, 5:51 PM Brian Dickson <brian.peter.dickson@gmail.com>
> wrote:
> >
> > I think the condition might be, "both in bailiwick and in the same zone"
> > meaning "in bailiwick and not below a zone cut"?

I don't think that makes sense - "bailiwick" is about glue. Maybe you
could say "in the same zone (not below a zone cut)" and refer to RFC 1034
section 4.2 for the definition of a zone.

> It seems to me that returning a (downward) delegation could actually be
> useful.  So why not include that?

Additional section processing does not normally include referrals. That
would be weird and new. I thought the point of the SVCB record was to
appear to existing auth and recursive DNS servers as much as possible like
a bog standard RR type, i.e. just wire and presentation format and a bit
of normal additional section processing. Which is basically what the draft
says now, though it unnecessarily respecifies additional section
processing.

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
Mull of Kintyre to Ardnamurchan Point: Variable, mainly north or northwest, 2
to 4, occasionally 5 near the Mull of Kintyre and Tiree. Slight, occasionally
smooth in shelter, becoming slight or moderate later. Fog patches developing.
Moderate or good, occasionally very poor.

v2.23.0 | Report a Bug | By Email