IETF Logo Mail Archive

Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...

John Levine <johnl@taugh.com> Fri, 22 May 2020 18:30 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 038393A00C0 for <dnsop@ietfa.amsl.com>; Fri, 22 May 2020 11:30:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.851
X-Spam-Level:
X-Spam-Status: No, score=-1.851 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1536-bit key) header.d=iecc.com header.b=bRUDSqv7; dkim=pass (1536-bit key) header.d=taugh.com header.b=CcQfpfVU
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6nrr2-RJkCPN for <dnsop@ietfa.amsl.com>; Fri, 22 May 2020 11:30:21 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24CF63A0D0E for <dnsop@ietf.org>; Fri, 22 May 2020 11:30:20 -0700 (PDT)
Received: (qmail 56868 invoked from network); 22 May 2020 18:30:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=de22.5ec81a3b.k2005; bh=1dbaVIii2Q1E1O59oMWkEU6uBWdlMMj/2fZMMxRPwFg=; b=bRUDSqv75y7OP8wuvGj7sCX3MrNTVJacyfRyxKpoIiMWPof3YFpMyQ4nU2XCTPO+LZQTU31wSLbeix3A44Ba7ZDl5iQuF72ZjwFP8uxpEzADwcOOaM5vdsLTE7iugtF0zJnDyx3VYPgR9HfvjW0blzSF2qXl/k84yIXoMeVQ9+V4ep2ojRtQO0j293wmwQiw+JxVjPbLJQdu0Q5k28WMXRWM6kkudCrUwkLfhn8Q60gLMCR5CQCalHo7mNoipnxT
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=de22.5ec81a3b.k2005; bh=1dbaVIii2Q1E1O59oMWkEU6uBWdlMMj/2fZMMxRPwFg=; b=CcQfpfVUsP7Qwd1UWDyxtUHEVy3F9OHhMxty+rHTj0x+L7GTOoEFMlrBLvz6x2qiJUgZkoqgH6j7ahVWMe77S178w8VwzQ1IHKeDN5aZniBsb2OURg14IItGphI7ukPYLcH9uGM6Np6dRabWqmmTrSgtJLt9bS12dAoxKMkjvOxhVWPgBGSFOovRK2bxUBW866PKzTkvaz/1oOU/lm4EUnqumdO/gc+afa0k63TalHNCFX0d+j4axO8IGSNYhVET
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTP via TCP6; 22 May 2020 18:30:18 -0000
Received: by ary.qy (Postfix, from userid 501) id C03641984D66; Fri, 22 May 2020 14:30:18 -0400 (EDT)
Date: Fri, 22 May 2020 14:30:18 -0400
Message-Id: <20200522183018.C03641984D66@ary.qy>
From: John Levine <johnl@taugh.com>
To: dnsop@ietf.org
Cc: paul@nohats.ca
In-Reply-To: <alpine.LRH.2.21.2005221227070.3507@bofh.nohats.ca>
Organization: Taughannock Networks
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/APNXzqCMCbbOYpoqLcaGUa15O10>
Subject: Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 May 2020 18:30:23 -0000

In article <alpine.LRH.2.21.2005221227070.3507@bofh.nohats.ca> you write:
>So it seems compared the other DNS problems, this is pretty much
>non-existing.

It seems to me it's more a policy issue than a technical one.

It's technically trivial for any zone manager to compare the glue in
the zone with the delegated entries and see what's different. The
interesting part is what you do about it. The answer in all the TLDs I
know seems to be nothing.

There is the separate but related issue of orphan glue, of which there
is quite a lot, 28K signed A/AAAA records in .org and 54K in .info.
This is not a technical DNS issue, since technically those are just
ordinary records in the zone, but they would seem to be policy issues,
particularly for fans of POWERBIND or whatever it's called now.

R's,
John

v2.30.2 | Report a Bug | By Email | System Status