Re: [DNSOP] Interim DNSOP WG meeting on Special Use Names: some reading material

David Conrad <drc@virtualized.org> Wed, 13 May 2015 22:05 UTC

Return-Path: <drc@virtualized.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 307831B3170 for <dnsop@ietfa.amsl.com>; Wed, 13 May 2015 15:05:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vYGVsoyLbi2i for <dnsop@ietfa.amsl.com>; Wed, 13 May 2015 15:05:17 -0700 (PDT)
Received: from mail-pd0-f169.google.com (mail-pd0-f169.google.com [209.85.192.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BDC01B316E for <dnsop@ietf.org>; Wed, 13 May 2015 15:05:17 -0700 (PDT)
Received: by pdbqa5 with SMTP id qa5so64159357pdb.1 for <dnsop@ietf.org>; Wed, 13 May 2015 15:05:17 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:content-type:from :in-reply-to:date:cc:message-id:references:to; bh=vVT9lKnDp5km9CpDqQgJseXXGwIfy//kHssdgVyaSGg=; b=BXtJJsVzijQw4dEWIFsp7m5jgcJFcimH6Q3fRyXSw7gnnTkKTGOxzT7hEsaXD04T5r Y5LJvmqXeNtymSFulioqbtCRz+nKeIn2QWQz9z9kkMNh9zMtZVvVGvRABW39gDbZOSYx 6qEVE2fm4spqHv5mf9Z34akiR/kW4wDzbF7sCljQoZhlhX0EcOZdmsC4rCPFHYHTXUML xyXFE9MRqk3y159cOj3P3GrdAZMf1ldPq5xgutmDdSFidsx9tLYM6Dgpbf4lfnYPwxp9 Lsh9AuvRZFjDabe16Yuad4YsKp1MIoH5iACsX6mCYMDqklDSFT1jG+ssm/uEjAot1Xg4 kFfA==
X-Gm-Message-State: ALoCoQn4KzHn9M/54haVQtIeD7Kbo6tQjLl7dGZMib2l3oen1+TDaIKodqMfhRz0MBdK/t6sfEg6
X-Received: by 10.70.135.195 with SMTP id pu3mr1997208pdb.0.1431554717160; Wed, 13 May 2015 15:05:17 -0700 (PDT)
Received: from [10.0.0.5] (c-50-184-24-209.hsd1.ca.comcast.net. [50.184.24.209]) by mx.google.com with ESMTPSA id b16sm20239613pbu.64.2015.05.13.15.05.15 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 13 May 2015 15:05:16 -0700 (PDT)
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\))
Content-Type: multipart/signed; boundary="Apple-Mail=_888B1691-85B0-401D-92E9-C1BB1664E727"; protocol="application/pgp-signature"; micalg="pgp-sha512"
X-Pgp-Agent: GPGMail 2.5b6
From: David Conrad <drc@virtualized.org>
In-Reply-To: <20150513205135.14395.qmail@ary.lan>
Date: Wed, 13 May 2015 15:05:13 -0700
Message-Id: <7AD02DF7-45A5-42CE-AAE2-50CCAE3B6A4F@virtualized.org>
References: <20150513205135.14395.qmail@ary.lan>
To: John Levine <johnl@taugh.com>
X-Mailer: Apple Mail (2.2098)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/4grisBGMvQZqMmVaZVDFXj3jY0g>
Cc: dnsop WG <dnsop@ietf.org>
Subject: Re: [DNSOP] Interim DNSOP WG meeting on Special Use Names: some reading material
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 May 2015 22:05:20 -0000

John,

> On May 13, 2015, at 1:51 PM, John Levine <johnl@taugh.com> wrote:
>> The distinction I'm making suggests why corp and onion seem different.  They are, in this
>> fundamental resolution nature.
> 
> I was under the impression that part of the problem with .corp was
> that there were a lot of SSL certificates floating around.

The SSL cert aspect of CORP usage was a component of the concern, but not the sole problem.

> With regard to the theory that ICANN has said they won't delegate
> .corp, .home, and .mail, they've only said they're "deferred"

I believe this is true.

> So this isn't an ICANN issue, it's an IANA issue.

It is neither: it is a DNS operational issue. A "large" number of people are apparently squatting on CORP/HOME/MAIL. Delegation of those TLDs would thus impact that "large" number of people.

> ICANN can't sell
> .corp, .home, and .mail for the same reason they can't sell .arpa or
> .invalid: they're already spoken for.

This is not true.

ARPA is defined in RFC 3172 and the IAB "in cooperation with ICANN" are responsible for it.
INVALID is defined in RFC 2606 which reserves its use.

CORP/HOME/MAIL are not defined anywhere (other than drafts).

But I suspect you know this, so I'm unclear why you claim "they're already spoken for."

ICANN can't "sell" CORP/HOME/MAIL because there are concerns related to security/stability with those TLDs that are, as yet, unresolved.

But I suspect you know that too.

Regards,
-drc