Re: [DNSOP] Call for Adoption: draft-arends-private-use-tld

Paul Wouters <paul@nohats.ca> Thu, 18 June 2020 16:00 UTC

Return-Path: <paul@nohats.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D40DB3A0921 for <dnsop@ietfa.amsl.com>; Thu, 18 Jun 2020 09:00:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nohats.ca
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OSaNg-pHihgR for <dnsop@ietfa.amsl.com>; Thu, 18 Jun 2020 09:00:17 -0700 (PDT)
Received: from mx.nohats.ca (mx.nohats.ca [IPv6:2a03:6000:1004:1::68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F2173A08F6 for <dnsop@ietf.org>; Thu, 18 Jun 2020 09:00:16 -0700 (PDT)
Received: from localhost (localhost [IPv6:::1]) by mx.nohats.ca (Postfix) with ESMTP id 49nmqL6g1wzMvh; Thu, 18 Jun 2020 18:00:14 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nohats.ca; s=default; t=1592496014; bh=8k62GeAFYP49E+HdaFNcQru56+7F/UUuo2INpXeMr+Y=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=WEKTa+EkAkZIl5jhZLCGIJlDdfsgbtHuoRZOkiI3bMTfmAzOvCMQcfkG5CEFTe1ZM g8B/ybW+qwCgYt+DQQ6rLHVbVDSafhfykv+eH/MYD3f/IycjOdvYbk6oEW95J6N9lJ vcfEw4Jz8hrRaB7kV4RVuT5kt45F/gdFzJbIEB1o=
X-Virus-Scanned: amavisd-new at mx.nohats.ca
Received: from mx.nohats.ca ([IPv6:::1]) by localhost (mx.nohats.ca [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id MZWzhnsJc7sI; Thu, 18 Jun 2020 18:00:13 +0200 (CEST)
Received: from bofh.nohats.ca (bofh.nohats.ca [76.10.157.69]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.nohats.ca (Postfix) with ESMTPS; Thu, 18 Jun 2020 18:00:13 +0200 (CEST)
Received: by bofh.nohats.ca (Postfix, from userid 1000) id 295A76020D8B; Thu, 18 Jun 2020 12:00:12 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1]) by bofh.nohats.ca (Postfix) with ESMTP id 1F09566A7A; Thu, 18 Jun 2020 12:00:12 -0400 (EDT)
Date: Thu, 18 Jun 2020 12:00:12 -0400
From: Paul Wouters <paul@nohats.ca>
To: Roy Arends <roy@dnss.ec>
cc: Petr Špaček <petr.spacek@nic.cz>, dnsop@ietf.org
In-Reply-To: <C93E56C1-4CD9-4143-BA04-76CE059D2556@dnss.ec>
Message-ID: <alpine.LRH.2.22.394.2006181149250.20534@bofh.nohats.ca>
References: <CADyWQ+F=JA6fogcy_JGRJaZv=Hq52ozgmY5gmzfPm=1oHcJXKg@mail.gmail.com> <427141d8-c164-35a7-0e02-0961865d4468@nic.cz> <af8c285c-6e08-7457-8ca8-b088e96dc251@nic.cz> <C93E56C1-4CD9-4143-BA04-76CE059D2556@dnss.ec>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/AErv58bZr8k_M5-fnTgaiRn91QQ>
Subject: Re: [DNSOP] Call for Adoption: draft-arends-private-use-tld
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jun 2020 16:00:19 -0000

On Thu, 18 Jun 2020, Roy Arends wrote:

>> To me it seems that most dnsop people (me included) do not want to legitimize use unnecessary use of private names as it often causes unnecessary pain down the road - but at the same time I personally recognize the motivation for home.arpa. etc.
>
> I want to recognise two points here:
>
> 1) The lack of a private DNS domain is the main motivation to squat.

I would say the main motivation is a short and memorable TLD for their
purpose. The importance here is "their purpose". Do you think tor would
have settled for .zz instead of .onion ? Or that GNUnet people who
wanted .gnu will settle for .zz ? And if they did, how would you expect
browser plugins for these two _different_ uses of .zz to work?

i think people who want a memorable name, will still squat one, and not
use .zz.

> 2) Using a private namespace is sometimes necessary, and its use needs to be legitimised 
>
> Device makers ship their device with “dlinkrouter”, “belkin”, “modem”, “gateway”; phones are shipped with “getcacheddhcpresultsforcurrentconfig”; software is shipped with default configurations like  “openstacklocal”; renowned companies advise to configure “corp” and “internal” for private use, and ISPs are shipping home routers with “.telus” and “.home”. We have all seen those examples, have frowned upon it, and rant on various lists and fora.

> These companies all had motivations to choose these labels.

basically all the domains you list here could have used one of their own
domains (eg local.telus.com instead of .telus, etc)

> I know of two (imho legitimate) reasons, having learned this from a few organisations about why they prefer a squatted domain over a registered domain:
>
> They could have shipped with a label under their own brand, but that would be an astonishingly bad idea, considering the volume (reason one) and type of traffic that was meant to be private (reason two), they would receive, as all these configurations will cause something to “phone home” to them.

So why not have no local domain instead? Or just pickup the DHCP domain
name. This is just bad software design. But this group isn't going to
fix that.

However, if these bad engineers start using .zz for this. What will
happen is that ISPs are going to specially handle this queries, leading
to a new set of issues for users. For example, dropping the queries
instead of answering NXDOMAIN.

Lumping all these users together in .zz is just going to make each
individual group inside .zz want to not be there. So I don't think
your premise of letting them squat in one place will actually end up
happening.

> Additionally, why these organisations could to tell their users to not “squat”, find a registrar, buy a domain, renew it annually, etc, these users would move on to an organisation that says “just use .internal and you’ll be fine.”.

And those same people would not pick .zz but still pick their own more
appropriate names.

Also, people will get confused about "zee-zee" versus "zed-zed" :)

> I’d like to get this space recognised as “better than squatting”.

One bad actor using their space will mark other good actors are
potentially bad ones. I wouldn't want to share my squatting place
with sketchy individuals and protocols.

Paul