Re: [DNSOP] ECS badly formatted ADDRESS field

Mukund Sivaraman <muks@isc.org> Thu, 24 December 2015 03:03 UTC

Return-Path: <muks@isc.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14C631AD34D for <dnsop@ietfa.amsl.com>; Wed, 23 Dec 2015 19:03:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.664
X-Spam-Level:
X-Spam-Status: No, score=0.664 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zx8uOk5Z4GRP for <dnsop@ietfa.amsl.com>; Wed, 23 Dec 2015 19:03:34 -0800 (PST)
Received: from mail.banu.com (mail.banu.com [46.4.129.225]) by ietfa.amsl.com (Postfix) with ESMTP id 359BC1AD34E for <dnsop@ietf.org>; Wed, 23 Dec 2015 19:03:33 -0800 (PST)
Received: from jurassic.l0.malgudi.org (unknown [14.195.232.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.banu.com (Postfix) with ESMTPSA id 5428F2FA00BF; Thu, 24 Dec 2015 03:03:31 +0000 (GMT)
Date: Thu, 24 Dec 2015 08:33:27 +0530
From: Mukund Sivaraman <muks@isc.org>
To: dnsop@ietf.org
Message-ID: <20151224030327.GA10494@jurassic.l0.malgudi.org>
References: <20151224023114.GA2748@jurassic.l0.malgudi.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="6c2NcOVqGQ03X4Wi"
Content-Disposition: inline
In-Reply-To: <20151224023114.GA2748@jurassic.l0.malgudi.org>
User-Agent: Mutt/1.5.24 (2015-08-30)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/9lfvU0mm59dSmJx6smS9uPq-GII>
Subject: Re: [DNSOP] ECS badly formatted ADDRESS field
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Dec 2015 03:03:35 -0000

On Thu, Dec 24, 2015 at 08:01:14AM +0530, Mukund Sivaraman wrote:
> I have a related clarification. What if the ADDRESS field has fewer
> octets than than SOURCE PREFIX-LENGTH indicates? Should REFUSED or
> FORMERR be returned in this case? The draft must clarify this if it's
> requiring REFUSED.

I also suggest describing implementation behavior with FAMILY=0 clearly
in section 6 (option format). This is described all over the draft.

Example, section 7.2.1 (authoritative nameserver) says:

>   The FAMILY, SOURCE PREFIX-LENGTH and ADDRESS in the response MUST
>   match those in the query, unless the query specified only the SOURCE
>   PREFIX-LENGTH for privacy (with FAMILY and ADDRESS set to 0).

1. It is not clear how SOURCE PREFIX-LENGTH makes sense by itself
without knowing what FAMILY it is targetting. How can it be 0 with
FAMILY=0?

2. I assume ADDRESS is missing here, not set to 0? Or are ADDRESS octets
present to match SOURCE PREFIX-LENGTH and they are set to 0 bits?
ADDRESS field should be undefined if FAMILY=0. It is better to clearly
state all this under section 6 (option format).

		Mukund