Re: [DNSOP] question regarding draft-ietf-dnsop-aname-03.txt/authoritative name server response

Matthijs Mekking <matthijs@pletterpet.nl> Wed, 29 May 2019 08:52 UTC

Return-Path: <matthijs@pletterpet.nl>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9067E120090 for <dnsop@ietfa.amsl.com>; Wed, 29 May 2019 01:52:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UN3cmffRUnBm for <dnsop@ietfa.amsl.com>; Wed, 29 May 2019 01:52:15 -0700 (PDT)
Received: from lb1-smtp-cloud9.xs4all.net (lb1-smtp-cloud9.xs4all.net [194.109.24.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F10D1200F6 for <dnsop@ietf.org>; Wed, 29 May 2019 01:52:13 -0700 (PDT)
Received: from [IPv6:2001:980:4eb1:1:e522:da23:9773:2af5] ([IPv6:2001:980:4eb1:1:e522:da23:9773:2af5]) by smtp-cloud9.xs4all.net with ESMTPSA id VuJdhoHkzsDWyVuJehgFu9; Wed, 29 May 2019 10:52:10 +0200
To: Klaus Malorny <Klaus.Malorny@knipp.de>, dnsop@ietf.org
References: <54f0a685-0a57-2821-26cc-c136c39e7750@knipp.de> <59692e76-d5f3-eab0-7fe7-150a0430b32e@pletterpet.nl> <b54e9dcc-dbce-39ce-3535-f41b36b77466@knipp.de>
From: Matthijs Mekking <matthijs@pletterpet.nl>
Message-ID: <3402edb8-f765-3773-b74c-f8ce3b2ba324@pletterpet.nl>
Date: Wed, 29 May 2019 10:52:09 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1
MIME-Version: 1.0
In-Reply-To: <b54e9dcc-dbce-39ce-3535-f41b36b77466@knipp.de>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
X-CMAE-Envelope: MS4wfBxTrVbnbNNiVg2oDN3QEVq8rHEso2XTGw30vIUW7E2yz6bDMiaBEQ8AQSPZltoPuW1jlE6pM73N+rdQ0rLvHptqtsAx3hJfqJa323jAK9uQWzOukvRj XCoVXA4hKr1NbtKeu9xSWbLPhEg0YihSbeap8YS7UPrTfbYN9QixWCjY+Ljw9NSgYuBBV45GS79vUSoWzR2jbQMVRIc/k4VCmYnJaQDcGuHK3Aslr9ksDad3 qfJxK9AR789eG43u6Gvfn7o6/CN7hfV4C8fams6BcC+x1XLt7zVbNEDdCX1Yzl6T
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/B4kNS-3NKmWluAw7lslHXzYCKtw>
Subject: Re: [DNSOP] question regarding draft-ietf-dnsop-aname-03.txt/authoritative name server response
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 May 2019 08:52:18 -0000

Hi Klaus,

On 5/29/19 9:34 AM, Klaus Malorny wrote:
> On 28.05.19 21:14, Matthijs Mekking wrote:
>> Hi Klaus,
>>
> 
> Hi Matthijs,
> 
>> I provided responses inline.
> 
> I too.
> 
>>
>> On 5/28/19 5:49 PM, Klaus Malorny wrote:
>>>
>>>
>>> Hi all,
>>>
>>> [...]
>>
>> I am not sure what text in Section 3 you are referring to, can you quote
>> the specific text?
>>
>> AFAICS there is nothing that says the visited ANAMEs and CNAMEs needs to
>> be set in the Additional section.  Visited ANAME and CNAME records are
>> used to adjust the owner name and the TTL.
> 
> Well, just the two sentences just below the headline of section 3:
> 
>    The requirements in this section apply to both recursive and
>    authoritative servers.
>    ^^^^^^^^^^^^^
> 
>    An ANAME target MAY resolve to address records via a chain of CNAME
>    and/or ANAME records; any CNAME/ANAME chain MUST be included when
>                                          ^^^^^^^^^^^^^^^^^^^^^^^
>    adding target address records to a response's Additional section.
> 
> Along with the following requirement of 3.1:
> 
>    o  MAY contain the target address records that match the query type
>       (or the corresponding proof of nonexistence), if they are
>       available and the target address RDATA fields differ from the
>       sibling address RRset.
> 
> So, I can choose to add the target addresses to the additional section,
> but then I have to add the full path of ANAME/CNAME/DNAME(?) also. This
> is my interpretation.

Stupid me, I looked at the work in progress draft in the github, where
the additional section processing sections have been split in
authoritative servers and resolvers.

But yeah, in -03 that seems right.  I was thinking of leaving out this
MAY keyword for authoritative servers because the target address records
are normally not available there, but if there is a caching resolver
inside the authoritative it may have them.  And so perhaps the MAY
keyword should stay for both cases.


Best regards,

Matthijs