Re: [DNSOP] Some distinctions and a request - Have some class?

"Patrik Fältström " <paf@frobbit.se> Fri, 03 July 2015 15:18 UTC

Return-Path: <paf@frobbit.se>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3657E1A900A for <dnsop@ietfa.amsl.com>; Fri, 3 Jul 2015 08:18:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.261
X-Spam-Level:
X-Spam-Status: No, score=-1.261 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z4JGF3Y9R06x for <dnsop@ietfa.amsl.com>; Fri, 3 Jul 2015 08:18:05 -0700 (PDT)
Received: from mail.frobbit.se (mail.frobbit.se [IPv6:2a02:80:3ffe::176]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 875DD1A8F4E for <dnsop@ietf.org>; Fri, 3 Jul 2015 08:18:05 -0700 (PDT)
Received: from [172.20.10.2] (2.65.19.59.mobile.tre.se [2.65.19.59]) by mail.frobbit.se (Postfix) with ESMTPSA id B3AD823011; Fri, 3 Jul 2015 17:18:02 +0200 (CEST)
From: Patrik Fältström <paf@frobbit.se>
To: manning <bmanning@karoshi.com>
Date: Fri, 03 Jul 2015 17:18:01 +0200
Message-ID: <1A6EA045-998D-487D-821C-D96716756F91@frobbit.se>
In-Reply-To: <BB0813DF-DF9D-4CD9-BDB8-26A437146986@karoshi.com>
References: <6CB05D82CE245B4083BBF3B97E2ED470C27498@ait-pex01mbx01.win.dtu.dk> <D1BAA21E.CA2E%edward.lewis@icann.org> <6CB05D82CE245B4083BBF3B97E2ED470C2759F@ait-pex01mbx01.win.dtu.dk> <6CB05D82CE245B4083BBF3B97E2ED470C275B2@ait-pex01mbx01.win.dtu.dk> <E225C721-7279-4053-97A2-2D63A155DA14@karoshi.com> <6CB05D82CE245B4083BBF3B97E2ED470C27602@ait-pex01mbx01.win.dtu.dk> <88E49F4B-64BD-4832-BD02-D1A882874E92@karoshi.com> <20150702234423.GB23022@mycre.ws> <EBDBDD70-046F-4E31-BDAC-A619EECD4F13@karoshi.com> <20150703012146.GA29948@mycre.ws> <DC13E07F-2203-4FE9-A67F-B5851A54298F@karoshi.com> <986E07DA-B174-4F81-BFB5-F5EAD46C506F@karoshi.com> <CAHw9_iJMZzrCM24gaMJpDNTHbKwF20DeVX7UszCMZuUvGnLaXw@mail.gmail.com> <BB0813DF-DF9D-4CD9-BDB8-26A437146986@karoshi.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=_MailMate_35DD08A9-A4F3-4DF8-AE7D-FF2E7058E871_="; micalg="pgp-sha1"; protocol="application/pgp-signature"
X-Mailer: MailMate (1.9.1r5102)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/5IOKiw7lEyKdTm092WDqUMAOknU>
Cc: Robert Edmonds <edmonds@mycre.ws>, dnsop@ietf.org, Andrew Sullivan <ajs@anvilwalrusden.com>
Subject: Re: [DNSOP] Some distinctions and a request - Have some class?
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Jul 2015 15:18:07 -0000

Unfortunately I think we all in this discussion [again] mix up discussion about DNS with the discussion about the name space that is in use for example by what we know as "the domain name system rooted at the root zone managed by IANA".

I think we just must force ourselves to stay focused on namespace management. A portion of that name space is to be accessed using DNS. Some other portions of that very same name space is access using other mechanisms.

This is not easy, but I think that is the way to attack the problem.

And given such a view, IETF is to decide what strings are to be used "by other mechanisms" so that [for example] they can and should never ever be accessed by the domain name system.

This while ICANN have processes for deciding what string should be TLDs, based on the standards created by for example the IETF.

Maybe a document is needed that describes that namespace? How it is partitioned?

  Patrik

On 3 Jul 2015, at 16:21, manning wrote:

> Thanks for that.  The original claim was that these name spaces were global in scope, but not part of the Internet.
> So I took that as face value.  Your example, while perhaps a valid interpretation, is not what was asked for.
> If it is, then namespace/class specific applications/extentions need to be developed/deployed, OR folks need to suck it up and just use the Internet portion of the DNS (and its associated rules, e.g. new TLDs are defined by ICANN)
>
> /bill
>
>
> On 3July2015Friday, at 7:01, Warren Kumari <warren@kumari.net> wrote:
>
>> On Fri, Jul 3, 2015 at 9:43 AM, manning <bmanning@karoshi.com> wrote:
>>> Actually, there IS an escape method already defined.  We just don’t use it much these days.
>>> It’s called  “class”
>>>
>>> There is no reason these alternate namespaces should sit in the IN class.  they could/should be in their
>>> own class, like the old CHAOS protocols.   So  a class  “ONION” or “P2P” would work out very nicely.
>>
>> Yup, but the problem is that people want to be able to enter the
>> alternate namespace names into existing applications (like browsers,
>> ssh, etc), just like a "normal" DNS name. They want to be able to
>> email links around (like https://facebookcorewwwi.onion/ ) and have
>> others click on them, etc.
>>
>> There is no way that I know of to tell e.g Safari to look this up in a
>> different class... and, even if there were, they would *still* leak,
>> because people are lazy...
>>
>> W
>>
>>>
>>> After all it’s the Domain Name System.  (can comprehend names in multiple domains, not just the Internet)
>>>
>>> manning
>>> bmanning@karoshi.com
>>> PO Box 12317
>>> Marina del Rey, CA 90295
>>> 310.322.8102
>>>
>>>
>>>
>>> On 2July2015Thursday, at 20:56, manning <bmanning@karoshi.com> wrote:
>>>
>>>>
>>>> On 2July2015Thursday, at 18:21, Robert Edmonds <edmonds@mycre.ws> wrote:
>>>>
>>>>> manning wrote:
>>>>>> There in lies the problem.  These systems have no way to disambiguate a local v. global scope.
>>>>>>    It seems like the obvious solution is to ensure that these nodes do NOT have global scope, i.e. No connection to the Internets
>>>>>>    and no way to attempt DNS resolution.   Or they need to ensure that DNS resolution occurs after every other “name lookup technology”
>>>>>>    which is not global in scope.
>>>>>
>>>>> I don't understand this point.  Since Onion hidden service names are
>>>>> based on hashes derived from public keys surely they're globally scoped
>>>>> (barring hash collisions)?
>>>>>
>>>>> --
>>>>> Robert Edmonds
>>>>
>>>> If they _are_ globally scoped,  what part of the local system decides which namespace to use, the ONION, the LOCAL, the P2P, the BIT, the BBSS, the DECnetV, the IXP, or the DNS…
>>>> where is search order determined?  Does first match in any namespace win?  What is the tiebreaker when there are label collisions between namespaces?
>>>>
>>>>
>>>> /bill
>>>
>>> _______________________________________________
>>> DNSOP mailing list
>>> DNSOP@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dnsop
>>
>>
>>
>> -- 
>> I don't think the execution is relevant when it was obviously a bad
>> idea in the first place.
>> This is like putting rabid weasels in your pants, and later expressing
>> regret at having chosen those particular rabid weasels and that pair
>> of pants.
>> ---maf
>>
>> _______________________________________________
>> DNSOP mailing list
>> DNSOP@ietf.org
>> https://www.ietf.org/mailman/listinfo/dnsop
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop