Re: [DNSOP] I-D Action: draft-ietf-dnsop-rrserial-01.txt

Dick Franks <rwfranks@gmail.com> Thu, 07 April 2022 20:24 UTC

Return-Path: <rwfranks@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3E1A3A1720 for <dnsop@ietfa.amsl.com>; Thu, 7 Apr 2022 13:24:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.107
X-Spam-Level:
X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mEXMGMx8kLbz for <dnsop@ietfa.amsl.com>; Thu, 7 Apr 2022 13:24:48 -0700 (PDT)
Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24AC53A1724 for <dnsop@ietf.org>; Thu, 7 Apr 2022 13:24:48 -0700 (PDT)
Received: by mail-wr1-x42d.google.com with SMTP id u3so9534862wrg.3 for <dnsop@ietf.org>; Thu, 07 Apr 2022 13:24:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=gnZeuYWJhJNNc77/MmG7ch/xw4j5QHlZPokMQIgQ3EI=; b=RMtqZRwWZoRq0DMNZamHOihk3FquqZqJuVaKekSHDNZ8EuBAKX3OS/fVrXYxG3ZniQ sZ2ha67Ba3CF0fgjp85VWOjXOeyoyL2kecSAV/nTIIaH2xToihfjw2fM8l0oEjkPf2iq 5rg2fqjfFci3Bybas7fWsXOp3FkyvwUB52nnWI3s27Fuee0TQtXbm6+kNObTse92zdJX inwOeJYSYOASTO6saXcE7lQwgV+tm2n9+1DBnZeXdIH5gsHB5pvreHZa4Z4eaoWbonb/ bVii+yks+HFb/Tkwh6i0onU0jVih9lykETptpF2fqK8++zIXcJl9vt50o6hdjXc69UpO e1Ig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=gnZeuYWJhJNNc77/MmG7ch/xw4j5QHlZPokMQIgQ3EI=; b=M9G7NbUHT9uL280yuxSizmTLPMxFOu8uvohmf7cbsGVQtaukCkEoR1V38dFPzWq5+J Y9yfkI/tG6QHduw0zWQzymBoVeHb7WPifEA/hqv1Plr3/samVaMw/1qtwUxUxgaXQchF f8/OCo6ZoNIFwt+2e/AfmNkx2OPzD+8QzFMuslm/fKmhel5eHhS4CLZDMD9Q1pZzrZ+5 Irw0xZE9mbRLNAycZyEV9jUP4tLQUP4MReJmuwdKhNcuWxHNfuG7/pMgwU9KtGBLKCsR ZGpyZLUF0a7FeAsBRF0ejqwddMk3fjqDEr1ddAYNPPDmYzRyxV8zRiZomfygtdzB2BrV EhJQ==
X-Gm-Message-State: AOAM533khiyQ4JhBwAzM+NumUfSge/L22nH1VLrbH+lo3B7jlMWF1i5i /6INOVJBatw6IxXeFqF9hgKjWDpkLrdGpJVDt1A=
X-Google-Smtp-Source: ABdhPJw4KvXy6mssOGxCwHLxQNaO+0ivGeG2/EsuDI0U7JnVSKTSZBfR4YfMuyBIsRT+d1TYviLi0ZhHkrT7973tGrM=
X-Received: by 2002:a5d:6e0c:0:b0:1ef:7cbb:a5aa with SMTP id h12-20020a5d6e0c000000b001ef7cbba5aamr12129722wrz.5.1649363086018; Thu, 07 Apr 2022 13:24:46 -0700 (PDT)
MIME-Version: 1.0
References: <1f62c1db-b9d4-f7d5-fdfa-c298541875d4@redbarn.org> <7155233A-DB48-4CFF-95A2-F48E32088EDB@hopcount.ca>
In-Reply-To: <7155233A-DB48-4CFF-95A2-F48E32088EDB@hopcount.ca>
From: Dick Franks <rwfranks@gmail.com>
Date: Thu, 07 Apr 2022 21:24:09 +0100
Message-ID: <CAKW6Ri6SNmvqFhRJOLs8fxNCdpWZcAoj4tJPc+hJtyt5o-8w9g@mail.gmail.com>
To: Joe Abley <jabley@hopcount.ca>
Cc: Paul Vixie <paul=40redbarn.org@dmarc.ietf.org>, IETF DNSOP WG <dnsop@ietf.org>, Hugo Salgado <hsalgado@nic.cl>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/8bnJk1SxKMaGZ_Smox1CylvKwVA>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-rrserial-01.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2022 20:24:53 -0000

On Thu, 7 Apr 2022 at 19:44, Joe Abley <jabley@hopcount.ca> wrote:
>
> On Apr 7, 2022, at 21:10, Paul Vixie <paul=40redbarn.org@dmarc.ietf.org> wrote:
>
> > but it seems to me you'd be better off with a zero-length option called SERIAL which if set in the query causes the SOA of the answer's zone to be added to the authority section (similar to an RFC 2308 negative proof) and which option would only be echoed in the answer's OPT if the option was supported. you'd want to specify that the SOA in this case is not optional and that its truncation would cause the TC bit to be set.
>
> That sounds like a lovely and clean way to do this. I like it.
>

This is an excellent idea, requiring trivial client-side support.

PV did not say so, but I would expect the SOA's RRSIG to be included
in the response.

--Dick



> Joe
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop