Re: [DNSOP] On .ZZ

David Conrad <drc@virtualized.org> Fri, 22 November 2019 18:33 UTC

Return-Path: <drc@virtualized.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72F481208E0 for <dnsop@ietfa.amsl.com>; Fri, 22 Nov 2019 10:33:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=virtualized-org.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uSZLJw-2zBnS for <dnsop@ietfa.amsl.com>; Fri, 22 Nov 2019 10:33:27 -0800 (PST)
Received: from mail-qk1-x72a.google.com (mail-qk1-x72a.google.com [IPv6:2607:f8b0:4864:20::72a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E591B1208BD for <DNSOP@ietf.org>; Fri, 22 Nov 2019 10:33:26 -0800 (PST)
Received: by mail-qk1-x72a.google.com with SMTP id e2so7147655qkn.5 for <DNSOP@ietf.org>; Fri, 22 Nov 2019 10:33:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtualized-org.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=B4qe+QylNaRonojfOETftTElcQZX7a7z03ADBOWTJqA=; b=UKl0YBNuF4Fk5a7G1277koZcG4WLYR0hpX1TrnY7y+u0DauJbFGtGHm8mHdZRT/nQr les+rOIUXkG2TV3+ItjJzea2X6OZUZm+QP1hep1qBEfbROwYBe/VM6rPsGdQIe6xGZD7 1OF9Fm4KYGckEQa0d/dBaQAhWIfFZRifMiawWQL5khz71rz/9EPSV2Ggn3D0VChZY3cT ysTL8ZabmbQxy1bKV1mlt4XN+Ads6XNA3lzCjHWEa4w7F1k6ZOJH81tK0rsKhGq8oz2W ol6t8AYtQbdUpwT1aZdmSui9D/CpYQpFQXnM8+lNAgwubl5e10xFblE41yBN4sT5CoJq w2fw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=B4qe+QylNaRonojfOETftTElcQZX7a7z03ADBOWTJqA=; b=t6iM25WLYjCVeJJsxns+zNX0KffwFdt7rHET/RMXvA4LnLTGQYnzUxcxbyxYarAsKy lAkGJuZQfN3UuAvliAGO2yDuomX/zW3tQ8zWJoVfCRlfMkMzWe/w4/GFRJ/zVKb9K1OO kFJgJ0o0+X/WIARmHK6tqBtdz5cluCDlMmPKdPtDzu6A66ip4LTqAh5kNPSrfsLgKDJ2 zwGgA6wf6GcMvu0YRS4jHKq5M3CiPjwnQTL8isGlMlRLxZOfjnyBT3kJaXDncZE7Rrtp uyzO70Ky4jRA9xIT5x+FqLuUtljn+qXQsbSM7AKu/o+8/ByV/VZlxCy/Klk8JZc8Wz8i YwRw==
X-Gm-Message-State: APjAAAVzGuagqFSkfPDLO+MG3eX+k/9koZSi8ohjq6TpstsvLPQUt651 PJ1wPlz3eTPE+65zKiVXkEOuXA==
X-Google-Smtp-Source: APXvYqzvCHiquGIiGToIlsmo4W6ruA2EP3PvlEIuvnm1DSdoXpRbH4HRK8Q+3z5rhjUWduG4uo7wzQ==
X-Received: by 2002:a37:4017:: with SMTP id n23mr14393936qka.53.1574447605807; Fri, 22 Nov 2019 10:33:25 -0800 (PST)
Received: from [10.47.61.35] (47-236.dc.icann.org. [192.0.47.236]) by smtp.gmail.com with ESMTPSA id t21sm1276765qke.69.2019.11.22.10.33.24 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 10:33:25 -0800 (PST)
Content-Type: multipart/signed; boundary="Apple-Mail=_9146E156-2C4C-4CD7-9507-B11F2B92D50A"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
From: David Conrad <drc@virtualized.org>
In-Reply-To: <1EC11E0E-5E1E-499E-B152-283265D591B8@pch.net>
Date: Fri, 22 Nov 2019 19:33:21 +0100
Cc: DNSOP@ietf.org
X-Mailbutler-Message-Id: 9FF53AF6-9B24-4C10-A131-F75E0C717B6F
Message-Id: <3B27AE04-E436-44FA-A9A2-678A505D42F8@virtualized.org>
References: <9FE1B1B3-4DC7-42C6-8F4C-0AA6E052DBC2@pch.net> <1EC11E0E-5E1E-499E-B152-283265D591B8@pch.net>
To: Bill Woodcock <woody@pch.net>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/62ahg-e8hZ5HAL_hiCM5ejT0vI8>
Subject: Re: [DNSOP] On .ZZ
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Nov 2019 18:33:29 -0000

This whole discussion confuses me.

As Roy and Jaap have pointed out, ISO 3166 has indicated the user defined codes won’t be allocated.  They are for private use. Just as RFC 1918 has designated 10/8 for private use.

To me, this means any of the user defined ISO codes are fair game for internal use (that is, between consenting adults), regardless of context, including use in the DNS.

My interpretation of this is that since ISO 3166/MA won’t be assigning those codes and it is wildly unlikely ccTLD policy will change such that IANA could delegate any of those codes, it makes the use of those 2-letter domains for private use wildly unlikely to result in a collision with public use (that is, delegation) since the domains can’t be delegated.

The advantages of this are:

1) no change in IANA policy
2) no need to rerun the fun of the RFC 6761 “discussions"
3) no need to do an ICANN PDP or some other undoubtedly painful process to reserve a string
4) no need for interminable arguments about language (“internal doesn’t mean anything in Klingon!”)
5) people can paint their bike shed any one of 42 colors

I don’t understand why one would need to pick ZZ (or any other user defined code) to mean by convention anything.  It doesn’t hurt anything, I just don’t see the point.

I would turn the question around:

Why not simply have an RFC that declares the user defined ISO 3166 codes as the RFC 1918-space equivalent for the DNS and be done with it?  If people _really_ want to continue the bike shedding on a particular string, they still can, but the folks who want a string (or strings) that they can use for internal purposes without fear of it being delegated in some future round of new gTLDs can just get on with their lives.

Confusedly,
-drc

P.S. Yes, I know people can use those 2 letter codes now, but having it explicitly stated in an RFC comforts some folks

> On Nov 22, 2019, at 4:23 PM, Bill Woodcock <woody@pch.net> wrote:
> 
> Man, sorry for the weird random capitalization, y’all.  Autocorrect has a mind of its own.
> 
> Also, what Matt said: perhaps we could approach consensus if those in favor of the proposal would articulate their thoughts on why specifying a two-letter is the best solution to (this, any) problem, the rest of us might be able to see why you feel your case is compelling.
> 
>                -Bill
> 
> 
>> On Nov 22, 2019, at 07:15, Bill Woodcock <woody@pch.net> wrote:
>> 
>> Eberhard:
>> 
>> The principle I’m trying to articulate is that our relationship to ISO 3166 is that of a standards body which has delegated to it.
>> 
>> ISO 3166, in turn, specifies that this code is (for now, and at their authority) to be used by USERS for their purposes.
>> 
>> It’s my assertion that it’s bad form for us, having placed ourselves in the standards body role on one side of ISO, to now also claim that we, the same people, are also  “users”  Standing on the other side of ISO.
>> 
>> That seems to me to not be in the spirit of a good-faith delegation.
>> 
>> If we want to start individually specifying the meaning or use of two-letter TLDs, it’s my assertion that We should first un-delegate that role from ISO, and take direct control of the task, not attempt to stand on both sides of them. And I think the harm of doing so would vastly outweigh any benefit. Therefore I think this shouldn’t be done. Either we delegate authority to them, or we don’t. No splitting the baby.
>> 
>>               -Bill
>> 
>> 
>>> On Nov 22, 2019, at 02:17, Dr Eberhard W Lisse <el@lisse.na> wrote:
>>> 
>>> Bill,
>>> 
>>> ISO has new draft out as part of their regular maintenance cycle which
>>> states
>>> 
>>>  [...]  In addition exactly 42 alpha-2 code elements are not used in
>>>  the ISO 3166, AA, QM to QZ, XA to XZ, ZZ. This rule may change in
>>>  the future.  [...]
>>> 
>>> and then references this
>>> 
>>>  If users need code elements to represent country names not included
>>>  in this part of ISO 3166, the series of letters AA, QM to QZ, XA to
>>>  XZ, and ZZ [...] are available.
>>> 
>>> I read that to mean that a .ZZ (or rather any of the 42 possibles) would
>>> be safe to use in our context.
>>> 
>>> If the rule were to change I would however speculate that the wishes of
>>> the government concerned might prevail over the wishes of ICANN.
>>> 
>>> Whether this all is safe enough to write a standard, I don't know.
>>> 
>>> 
>>> el
>>> 
>>> 
>>>> On 22/11/2019 10:26, Bill Woodcock wrote:
>>>>> On Nov 22, 2019, at 12:20 AM, Shane Kerr <shane@time-travellers.org>
>>>>> wrote:
>>>>> 
>>>>> "User-assigned codes - If users need code elements to represent
>>>>> country names not included in ISO 3166-1, the series of letters AA,
>>>>> QM to QZ, XA to XZ, and ZZ, and the series AAA to AAZ, QMA to QZZ,
>>>>> XAA to XZZ, and ZZA to ZZZ respectively, and the series of numbers
>>>>> 900 to 999 are available.  NOTE: Please be advised that the above
>>>>> series of codes are not universal, those code elements are not
>>>>> compatible between different entities."
>>>>> 
>>>>> So the intention of the ISO at least is that these codes are used by
>>>>> users.  (I'm not sure what the scary warning means.)  Certainly I
>>>>> have made heavy use of .Q* and .X* in my own testing, with the
>>>>> assumption that these would never be assigned (and yes, there is
>>>>> .TEST but sometimes you need more than one one TLD).
>>>> 
>>>> Right.  And in fact, “unassigned” ISO codes _do_ get used, for places
>>>> like Kosovo, that are in a state of disputed or partially-recognized
>>>> countryhood, and ranges that are reserved for user use really should
>>>> be left for that use, because they do in fact get used by users, so
>>>> any centrally-coordinated use will run afoul of that.
>>>> 
>>>> Again, this is an argument from principle rather than an argument
>>>> based on the specific case at hand.  I just think that we have a
>>>> well-established precedent that all two-letter TLDs are derived from
>>>> ISO 3166 Alpha-2, and it’s bad form to cross back over and start
>>>> poaching in their territory.
>>>> 
>>>>                              -Bill
>>> 
>>> --
>>> Dr. Eberhard W. Lisse   \         /      Obstetrician & Gynaecologist
>>> el@lisse.NA             / *      | Telephone: +264 81 124 6733 (cell)
>>> PO Box 8421              \      /
>>> Bachbrecht 10007, Namibia ;____/
>>> 
>>> 
>>> _______________________________________________
>>> DNSOP mailing list
>>> DNSOP@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dnsop
>> 
> 
> 
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop