Re: [DNSOP] Call for Adoption: draft-arends-private-use-tld

Roy Arends <roy@dnss.ec> Thu, 18 June 2020 16:29 UTC

Return-Path: <roy@dnss.ec>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 848C73A0AC7 for <dnsop@ietfa.amsl.com>; Thu, 18 Jun 2020 09:29:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=dnss.ec
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uUHU5W01avs7 for <dnsop@ietfa.amsl.com>; Thu, 18 Jun 2020 09:29:55 -0700 (PDT)
Received: from mail-il1-x142.google.com (mail-il1-x142.google.com [IPv6:2607:f8b0:4864:20::142]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC7283A09BB for <dnsop@ietf.org>; Thu, 18 Jun 2020 09:29:54 -0700 (PDT)
Received: by mail-il1-x142.google.com with SMTP id h3so6332796ilh.13 for <dnsop@ietf.org>; Thu, 18 Jun 2020 09:29:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dnss.ec; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Z55eyBWF4FcbrIPPCuYxLpNPnpMwieihpVNPLg0pwlA=; b=LhB4rBYk/QGCYjs4IW3gO5nHdEN9lbvTee/5kdyXz/qZm6iz7LKeLkgyusN89eBxM3 8GjWB+iSEMoXsX45jeA3zBf6xpqvR/aw2U0KQwxsjPyB9nZRyNfPMZ7AgfdEynZT0XQh //CMRoshU1+3p4OLL/WKDo78HTsI3vew2RP58=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Z55eyBWF4FcbrIPPCuYxLpNPnpMwieihpVNPLg0pwlA=; b=Frjg3nH02gbgs/4x4xoHBJGQ1jGsNs6LclMvmtWcm93LCZUF8FSQsxNatZ9LQVXdgn XTyjNo6siC4e3W3fl0udHLK1ui0XeiZCnP7NZER0vXHl6V8+hUsRkRZDuhsbVJ9fxFM2 4Iv3mJItAgV1MQYdVw8A+oP653hyRFs8NRdjvLUoC7wak4FCCPYlCOIBSu5bjpXL20FY 1Qv4FmS8WKWR2DPAF6pahUOlOrdbC7VYYjRnsRgC07GHxKT9BioTxpt+oLLfh8hMYqa0 UOj9h/RAjiATlTsU4lKeOSQTyvKNv77/tKq5aKtDh07wXbAKIrW2KkbyvOL9wp63qHOj Sw8g==
X-Gm-Message-State: AOAM531/qJ0MmjkqGp/O17Hhiqv08VQ44MU4RQzt947zwqN9qBD8EXC+ KaX+DTobg8XQbciuV+IUWLOv5g==
X-Google-Smtp-Source: ABdhPJynuY8khtyAgLNAHHPPzBfo65ifmtXAbl5SSKKAPTTnxSw8bvBTTuKeTOMeiiMJOJcTD2VRFA==
X-Received: by 2002:a92:8986:: with SMTP id w6mr4376158ilk.253.1592497793960; Thu, 18 Jun 2020 09:29:53 -0700 (PDT)
Received: from [192.168.1.64] (host86-175-77-184.range86-175.btcentralplus.com. [86.175.77.184]) by smtp.gmail.com with ESMTPSA id k5sm1692149ili.80.2020.06.18.09.29.52 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 18 Jun 2020 09:29:53 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
From: Roy Arends <roy@dnss.ec>
In-Reply-To: <alpine.LRH.2.22.394.2006181149250.20534@bofh.nohats.ca>
Date: Thu, 18 Jun 2020 17:29:50 +0100
Cc: Petr Špaček <petr.spacek@nic.cz>, dnsop@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <1EEAE853-4F67-4756-800B-677A5C3AC113@dnss.ec>
References: <CADyWQ+F=JA6fogcy_JGRJaZv=Hq52ozgmY5gmzfPm=1oHcJXKg@mail.gmail.com> <427141d8-c164-35a7-0e02-0961865d4468@nic.cz> <af8c285c-6e08-7457-8ca8-b088e96dc251@nic.cz> <C93E56C1-4CD9-4143-BA04-76CE059D2556@dnss.ec> <alpine.LRH.2.22.394.2006181149250.20534@bofh.nohats.ca>
To: Paul Wouters <paul@nohats.ca>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/5oLps5gDDo7goqV2KGxubel_F4A>
Subject: Re: [DNSOP] Call for Adoption: draft-arends-private-use-tld
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jun 2020 16:29:57 -0000

.gnu and .onion were never intended as private use. Gnu was meant as just another top level domain, and .onion is supposed to work over a (private but remote) network. 

Maybe “.local” would have been a candidate to use one of the iso3166-1 Alpha-2 user assigned string.



On 18 Jun 2020, at 17:00, Paul Wouters <paul@nohats.ca> wrote:

> 
> On Thu, 18 Jun 2020, Roy Arends wrote:
> 
>>> To me it seems that most dnsop people (me included) do not want to legitimize use unnecessary use of private names as it often causes unnecessary pain down the road - but at the same time I personally recognize the motivation for home.arpa. etc.
>> 
>> I want to recognise two points here:
>> 
>> 1) The lack of a private DNS domain is the main motivation to squat.
> 
> I would say the main motivation is a short and memorable TLD for their
> purpose. The importance here is "their purpose". Do you think tor would
> have settled for .zz instead of .onion ? Or that GNUnet people who
> wanted .gnu will settle for .zz ? And if they did, how would you expect
> browser plugins for these two _different_ uses of .zz to work?

.gnu and .onion were never intended as private use. Gnu was meant as just another top level domain, and .onion is supposed to work over a (private but remote) network. 

> i think people who want a memorable name, will still squat one, and not
> use .zz.

Yes, and folks will cross a red light and there will be collisions, instead of using a zebra path.

>> 2) Using a private namespace is sometimes necessary, and its use needs to be legitimised 
>> Device makers ship their device with “dlinkrouter”, “belkin”, “modem”, “gateway”; phones are shipped with “getcacheddhcpresultsforcurrentconfig”; software is shipped with default configurations like  “openstacklocal”; renowned companies advise to configure “corp” and “internal” for private use, and ISPs are shipping home routers with “.telus” and “.home”. We have all seen those examples, have frowned upon it, and rant on various lists and fora.
> 
>> These companies all had motivations to choose these labels.
> 
> basically all the domains you list here could have used one of their own
> domains (eg local.telus.com instead of .telus, etc)

You are wilfully ignoring what I wrote. I know that seems convenient, but it is unhelpful in this discussion. Read the “bad idea” part below for your answer.

>> I know of two (imho legitimate) reasons, having learned this from a few organisations about why they prefer a squatted domain over a registered domain:
>> 
>> They could have shipped with a label under their own brand, but that would be an astonishingly bad idea, considering the volume (reason one) and type of traffic that was meant to be private (reason two), they would receive, as all these configurations will cause something to “phone home” to them.
> 
> So why not have no local domain instead? Or just pickup the DHCP domain
> name. This is just bad software design. But this group isn't going to
> fix that.
> 
> However, if these bad engineers start using .zz for this. What will
> happen is that ISPs are going to specially handle this queries, leading
> to a new set of issues for users. For example, dropping the queries
> instead of answering NXDOMAIN.

Really? No you think you know what ISPs will do?

> Lumping all these users together in .zz is just going to make each
> individual group inside .zz want to not be there. So I don't think
> your premise of letting them squat in one place will actually end up
> happening.

It is clear to me that you haven’t read the latest version of the draft. ZZ was an example that I have removed.

>> Additionally, why these organisations could to tell their users to not “squat”, find a registrar, buy a domain, renew it annually, etc, these users would move on to an organisation that says “just use .internal and you’ll be fine.”.
> 
> And those same people would not pick .zz but still pick their own more
> appropriate names.

We can’t help folks wilfully ignoring traffic signs.

Roy