Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...

Warren Kumari <warren@kumari.net> Thu, 21 May 2020 22:19 UTC

Return-Path: <warren@kumari.net>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C528C3A0C19 for <dnsop@ietfa.amsl.com>; Thu, 21 May 2020 15:19:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=kumari-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YVQDAj2hP_HH for <dnsop@ietfa.amsl.com>; Thu, 21 May 2020 15:19:39 -0700 (PDT)
Received: from mail-lj1-x22b.google.com (mail-lj1-x22b.google.com [IPv6:2a00:1450:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 911573A0C10 for <dnsop@ietf.org>; Thu, 21 May 2020 15:19:39 -0700 (PDT)
Received: by mail-lj1-x22b.google.com with SMTP id w10so10316918ljo.0 for <dnsop@ietf.org>; Thu, 21 May 2020 15:19:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kumari-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=l/gPhk7Q3GikCtO4xPmKQaG4isYMPZarrq3w0dhPmYI=; b=rtseLznw2K9BuKPtqFYpa4CtOftdOfO283AfATbycN16Dosi1M2tBtLu8iRWMWwc3t GS2bf1LikcDM0P/QARW8nlDn3sw/SOXNGLVK9XoiV2NoD+8aLZM3T2+Dx3ldGAzvVXy/ DTdlKxFMD5Ow/YVpmmjUrb44/oce+2HLEvMuIYUj7DdRwuzCPCUPw9b2Aoqk45wjNIYX FvQMrtgXQW4MsCoJceBcfEg6HeAO+bv7ZBDo2TuBl9bnzasHbCffTYxYZ4yeEu6vkQkJ 8q/Bk+I0gYR69ybHPRGfb2ADTa3wpG39+XsPjOYoN+sZ3VE+kLieyNHu1eKeXk42ayW6 i9iw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=l/gPhk7Q3GikCtO4xPmKQaG4isYMPZarrq3w0dhPmYI=; b=GbbNFllfwWY51MsYivm44cVXt/mrBTdtP+oZ0lfBpY+MJgGvT3VxtefSIkgeGz9ZM+ jz5lncgJsX6qBnOYkrFJSk7hGsFv0k1mxPUsk2Tmq8IDYO+wzI6IhMqIOx/XIezBX2IE prLFFS/gARw7qmhJYfEUQEDH6QhlXP/KVZqHGBzp1yFtKiqILddNZ6+J3LZ7dZFwQWpf QHa2Nd/e331rr/bFpLniHXktJgamKryMpE96/ekNfdorWs99awFH6TMHNEwgxJvAqluA kf6aiBRSNIP2kViHglDIOO9HSrImbNYBVP0ysBXb2YQdX/UEx1vWhwKx1lbnWzJhhx4O eH5g==
X-Gm-Message-State: AOAM533I33ogA2U1Hu0nVubKbIowSy2LpWvrCNyfgiH4sRVQeVZtvy48 SmdmM85gtfI6NxkqeSPxdUAdRqd9W8YUP3D+H8kXwA==
X-Google-Smtp-Source: ABdhPJzTiVykDjLNI/4tPBbIpc/nzTiSrw6wolCQf+YYUJYm0pddKxCCdbt817OpcucXXbQn4eL6pyeNgkgVq5cykIU=
X-Received: by 2002:a2e:b4e3:: with SMTP id s3mr5997497ljm.11.1590099577171; Thu, 21 May 2020 15:19:37 -0700 (PDT)
MIME-Version: 1.0
References: <CAHw9_i+UsV9NkuPM4KYBZhO7_J78MkUEyVR3fr=vOX-vsjJeUA@mail.gmail.com> <CALZ3u+YDpLr6JZr0gwxmYB6S77_V_D0Z_SRTE_=8DiYGXa+XTQ@mail.gmail.com>
In-Reply-To: <CALZ3u+YDpLr6JZr0gwxmYB6S77_V_D0Z_SRTE_=8DiYGXa+XTQ@mail.gmail.com>
From: Warren Kumari <warren@kumari.net>
Date: Thu, 21 May 2020 18:19:00 -0400
Message-ID: <CAHw9_iLDtOGz6k=JMU3eZ6zNAgS-S=x1ojbh=qwOn2BRBUv1cg@mail.gmail.com>
To: Töma Gavrichenkov <ximaera@gmail.com>
Cc: dnsop <dnsop@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/49cLgSeu3yYXWdbaNYfla9tZBKw>
Subject: Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 May 2020 22:19:43 -0000

On Thu, May 21, 2020 at 6:00 PM Töma Gavrichenkov <ximaera@gmail.com> wrote:
>
> Peace,
>
> On Thu, May 21, 2020 at 11:08 PM Warren Kumari <warren@kumari.net> wrote:
> > [..skip..]
> > Looking in the webserver log, there are also some hits - e.g:
> > - - [21/May/2020:19:09:10 +0000] "GET /favicon.ico HTTP/1.1" 404 209
> > "http://www.wow4dns.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X
> > 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138
> > Safari/537.36"
>
> Is there a statistically — or somehow otherwise — reason to think this
> was not a coincidence?
> (I'm just askin' before going to repeat the same experiment)

Yes, no, maybe?!

www.wow4dns.com was never pointed at this machine until I added the
glue and NS records (it used to point elsewhere). It's quite probable
that this was triggered by something other than the Atlas measurement,
but all that that means is that someone actually resolved the name
"for real".
I haven't seen any more hits since then, so, um, who knows...


I initially wanted to do an Atlas HTTP measurement (instead of a DNS
measurement), but then realized that the HTTP measurement type can
only be directed at a RIPE Anchor (not an arbitrary name). If there
are any Atlas folk around (or if people want to test from other tools
/ vantage points), feel free...


W

>
> --
> Töma



--
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf