[DNSOP] Re: Andy Newton's Discuss on draft-ietf-dnsop-ds-automation-08: (with DISCUSS and COMMENT)
Andy Newton <andy@hxr.us> Wed, 20 May 2026 11:11 UTC
Return-Path: <andy@hxr.us>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 98FC2F18063C for <dnsop@mail2.ietf.org>; Wed, 20 May 2026 04:11:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1779275519; bh=79X07oYrToF6j4VOfQx9WxILGtkr0/cAHeBdiCM92kM=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=EMdoB5VxXXwO6+VmgQcKSBbaPBnVRnaChvYwSlLpbVaKcXHRV3ffptZVQ7GClY2V0 a0ewvAoM3Gp6Ufr7KEUhP8jC/ws/XeG0kbfe1uVSr514ZDr2mQVV2O4Z7FLdYhF4dM v1PV7A9gN1r1MJNIEJMWgN1rYYlOse209IG9zgYk=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=hxr-us.20251104.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QPFC1S_dF1Jv for <dnsop@mail2.ietf.org>; Wed, 20 May 2026 04:11:59 -0700 (PDT)
Received: from mail-qk1-x736.google.com (mail-qk1-x736.google.com [IPv6:2607:f8b0:4864:20::736]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 7DFA4F18056D for <dnsop@ietf.org>; Wed, 20 May 2026 04:11:29 -0700 (PDT)
Received: by mail-qk1-x736.google.com with SMTP id af79cd13be357-90d13fa59e8so483506985a.2 for <dnsop@ietf.org>; Wed, 20 May 2026 04:11:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hxr-us.20251104.gappssmtp.com; s=20251104; t=1779275489; x=1779880289; darn=ietf.org; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=GGH88DB7+msCwBgIHX4+ZhUL6K4/lkPzp2nXflrnYw4=; b=x4iv3JI5JgU70br2B0vBB6DmRg2JNi9QB8CBqotsJ91kDeUU2vZCmHqMKORYXBGXvK 6gr6ddOxFhZfLL9hpx8S9dNz7mlMvzbbnzedhYQt5W16psIoS6LiQYHKXOJ7Z2DU3eE+ BnfRTbCkGlvM9gzoc4SKw1ozGWSsieNAPdEE8IwCx87vLx48aMF7PBGj8A8gEHqdBI9R 1KWU06o1QCF6oojI2oeOjgJjMKa0MEPd0AwVNumd89kzTqdX1QlR/nTXcC27Mz2VJxJm lZBoLB6WrauEIjhRNrkZpul0EqXq4ncsHqL3Lz/IojaUkO56Q0LU5VkRsJ2LvblHieg6 jmbw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1779275489; x=1779880289; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=GGH88DB7+msCwBgIHX4+ZhUL6K4/lkPzp2nXflrnYw4=; b=bizZyhoPTPtAGSUZziinKy08GqaWdZfMCuyzLT6dznLVTe7fAmCYDKxPD1eTF0fPZm tmNSqj73L6WknKjIRs9m/fhkihd67fSFi82PceFSpjFEHeX6BPIUcNaQG7KzblcXWuWG VXokr8ZAReAqd5cq8qxYEvPvCiQrApaj5l3FNFayi066QWPMI5xDItPYO5mEn9/ryycO miguS+ouIpXcvyfQiTpRD1uuPjGxAQySbeorlz5dZEIJ2k8RJEpSdk9aHbzngmovfreP kF/Lmk1Z9hMFiqT2jXykWxn9KddUI0NIChvXSbhgwq+GkIUZ9ENbpSeS8ZRRdw5dXOt/ NnrQ==
X-Forwarded-Encrypted: i=1; AFNElJ/MXzV6rAPmtzHNSvuSXLBL6DVqMrRQrFBpsM41kJbmOrMFWYglWkVWxdyzZhOV6XzPxT70Iw==@ietf.org
X-Gm-Message-State: AOJu0YwuXtPe5QvqU5pBmKLcjcovbKK/tIC5SWGL46lvQMI3SI5pyZ5Q 0rYxzl+OwUnSQZ+Ldz1BoiBWoFfVpRvSBNeml+02hYzCxGOCDlsqrwOp+hN1wVdKf5E=
X-Gm-Gg: Acq92OH9mnh4LatXm6YbOPXmPKyogEKsP3ykfzDX+9HjSmSAF6XfoCYeMQ/gPasHLQU PqaSMLy1j20c+m4k+l0+lzpd9Eit7YhxW5IsMXDnoJwZ01glfk7kOpTR0uyHweQtZSMaiHyC8sJ 0kezfDdiq+zrtLiUmhu72G7IzB8byv6s9xFo2sPaLCnOFTLHGOh2wDT1imr2rZZLAkAOYoSblzv XylOMKbLJNcF8OW34Y/Yp1iZx3v1ev45MTVsqjtuFagAEctohfGj9JRKCkCwtWwcNtxl+ytTTz9 Y1pq06c4xUPyOWPRySulV7rbfONmGmA+FwI2KRB0a0TeYuXXKM9uWwv+s8K3iMt+bM98NeH6QBc 6Xsd7d/9DwK1fSwyIvHACExVP6k2SWjXADnACYBRDaD+SEirpj/JCLODczSdO1bbxo+RBY4D8ng B66gVZYr6Vjtrw9d2vkxUfO7wxbiAIqIAWC1PwAVITaNmBBQ==
X-Received: by 2002:a05:620a:1136:b0:912:1206:ddc0 with SMTP id af79cd13be357-9121206e054mr2607945785a.7.1779275488867; Wed, 20 May 2026 04:11:28 -0700 (PDT)
Received: from [10.47.61.164] (47-236.dc.icann.org. [192.0.47.236]) by smtp.gmail.com with ESMTPSA id af79cd13be357-910baa3c045sm2128493385a.13.2026.05.20.04.11.27 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 20 May 2026 04:11:27 -0700 (PDT)
Message-ID: <ff078e5b-74c5-4375-ab54-3f3926572910@hxr.us>
Date: Wed, 20 May 2026 07:11:27 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: mohamed.boucadair@orange.com, The IESG <iesg@ietf.org>
References: <177923004209.585.3418420922155603562@dt-datatracker-7688897f84-hmm7m> <PAUP264MB6756B2843E82CD17B895AE7E88012@PAUP264MB6756.FRAP264.PROD.OUTLOOK.COM>
Content-Language: en-US
From: Andy Newton <andy@hxr.us>
In-Reply-To: <PAUP264MB6756B2843E82CD17B895AE7E88012@PAUP264MB6756.FRAP264.PROD.OUTLOOK.COM>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Message-ID-Hash: RN2S5EQLQ2B5DR7KV3ULB37DOQ2YS3TY
X-Message-ID-Hash: RN2S5EQLQ2B5DR7KV3ULB37DOQ2YS3TY
X-MailFrom: andy@hxr.us
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "dnsop-chairs@ietf.org" <dnsop-chairs@ietf.org>, "dnsop@ietf.org" <dnsop@ietf.org>, "draft-ietf-dnsop-ds-automation@ietf.org" <draft-ietf-dnsop-ds-automation@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: Andy Newton's Discuss on draft-ietf-dnsop-ds-automation-08: (with DISCUSS and COMMENT)
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/8hgHnyVsxVYSyGcn6oBUJT9GGzo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>
On 20-05-2026 12:47 AM, mohamed.boucadair@orange.com wrote: > Hi Andy, all, > > I trust the authors will engage soon. > > Rather than repeating the exception/implication of not following a SHOULD for these items, the document factorizes that given that the same reasoning applies: > > CURRENT: > The recommendations optimize interoperability and safety. In certain > cases, local policy may take precedence, such as when a registry is > subjected to national cryptographic policy requirements or performs > out-of-band verification of DS changes with a human for high-stake > domains. However, not following any requirements designated with the > "SHOULD" key word will generally lead to undesirable effects of > ambiguity and interoperability issues. When implementing these > recommendations, operators have to carefully weigh whether any > particular deviation is justified in their particular context. > > Cheers, > Med Hi Med, I appreciate the difficulty with balancing the need to allow local policy while offering technical guidance. Can the above be strengthened? Such as the last sentence: When implementing these recommendations, operators MUST mitigate issues arising from any particular deviation. -andy
- [DNSOP] Andy Newton's Discuss on draft-ietf-dnsop… Andy Newton via Datatracker
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… mohamed.boucadair
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… Andy Newton
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… Peter Thomassen
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… Peter Thomassen
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… mohamed.boucadair
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… Andy Newton
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… Peter Thomassen
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… Andy Newton
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… Peter Thomassen
- [DNSOP] Re: Andy Newton's Discuss on draft-ietf-d… Andy Newton