[DNSOP] Re: [dd] Root DS/DELEG query
Petr Špaček <pspacek@isc.org> Tue, 22 July 2025 16:59 UTC
Return-Path: <pspacek@isc.org>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D3D1A48B1FBF; Tue, 22 Jul 2025 09:59:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.399
X-Spam-Level:
X-Spam-Status: No, score=-4.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=isc.org header.b="KBu/r9Xe"; dkim=pass (1024-bit key) header.d=isc.org header.b="OP3dDnkn"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tqEDWMefo75H; Tue, 22 Jul 2025 09:59:34 -0700 (PDT)
Received: from mx.pao1.isc.org (mx.pao1.isc.org [149.20.2.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id E1E4E48B1D77; Tue, 22 Jul 2025 09:58:10 -0700 (PDT)
Received: from zimbra10.isc.org (zimbra10.isc.org [149.20.2.90]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx.pao1.isc.org (Postfix) with ESMTPS id 32EF34D124A; Tue, 22 Jul 2025 16:58:10 +0000 (UTC)
ARC-Filter: OpenARC Filter v1.0.0 mx.pao1.isc.org 32EF34D124A
Authentication-Results: mx.pao1.isc.org; arc=none smtp.remote-ip=149.20.2.90
ARC-Seal: i=1; a=rsa-sha256; d=isc.org; s=ostpay; t=1753203490; cv=none; b=AJz1/S1nSmETiPtHhrill2K/5uIGq5xidL2ozIKBjLWg5XEruNncjZ1dzI/IVviDS+HPm/IEzUdXCuSqayI/j+LomEVU5CpECqrvXZy+uPkNbEsatvuERdLumN9ZfzjcqaogyemXyZRTqumi7eB8WCMhXsEBqKtavlk0gzHYaOo=
ARC-Message-Signature: i=1; a=rsa-sha256; d=isc.org; s=ostpay; t=1753203490; c=relaxed/relaxed; bh=ZKpVZIYMuWxlJlblB+ZvAm7i06565b6mOigioUep6cU=; h=DKIM-Signature:DKIM-Signature:Message-ID:Date:MIME-Version: Subject:To:From; b=IFHW7AbIFIHSpBLsV+fjwYuEq1sPLctYgGQ4w8HgAuuRmoaMA0AgE5VOnynrUaPIK7mFMP/VHZl9lWl3e5ypXekmWWYYvnEgf80qJT9+pgefvxrHG8GF2YLTBq5RYRdNGqMMi/nCfs4UwEsQTuHSsjnMwKmo3A38oGV1Awwr/Xo=
ARC-Authentication-Results: i=1; mx.pao1.isc.org
DKIM-Filter: OpenDKIM Filter v2.10.3 mx.pao1.isc.org 32EF34D124A
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=isc.org; s=ostpay; t=1753203490; bh=dGEEiVC9Btf4Tvp/JiIDWDqNqunUHPcIfS0PPAYqUj4=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=KBu/r9XekhGxs9bXYoiD54N/1+qUgNKvgOXfjpibtREoUaTsH1Lph9d0iOwCDqEj+ M2L07I8yxIl7pVAB9SKZwXPehlNm8qJjyODe4uZQolpJj0YP8butmLj+ppiPAfmR2X cv8/pwaZhe9ErPjNlM4XTJHFa3djYxEtOjha1SQ8=
Received: from zimbra10.isc.org (localhost [127.0.0.1]) by zimbra10.isc.org (Postfix) with ESMTPS id 2D9AD2E601BD; Tue, 22 Jul 2025 16:58:10 +0000 (UTC)
Received: from zimbra10.isc.org (localhost [127.0.0.1]) by zimbra10.isc.org (Postfix) with ESMTPS id 299AF2E601BE; Tue, 22 Jul 2025 16:58:10 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.10.3 zimbra10.isc.org 299AF2E601BE
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isc.org; s=05DFB016-56A2-11EB-AEC0-15368D323330; t=1753203490; bh=ZKpVZIYMuWxlJlblB+ZvAm7i06565b6mOigioUep6cU=; h=Message-ID:Date:MIME-Version:To:From; b=OP3dDnkneMSqUMnyDZAmb2ylVQu87Fw+55wFW/qdOq4Ry6h+bzfgePPCXQQCIypJC se1+CC4vLHo6kbNiDNuCbEhfPOqRcSCNJuBhK7HGfHSOJ4jpovY2zxrvdPdlTvQpiW 1U7m1N7ZUsWf3KEgFRJNhZpZHSTl0fj8IaYHpCpE=
Received: from [192.168.0.121] (94-143-239-125.chrudim.cz [94.143.239.125]) by zimbra10.isc.org (Postfix) with ESMTPSA id 5F9072E601BD; Tue, 22 Jul 2025 16:58:09 +0000 (UTC)
Message-ID: <22e92a4f-85d3-4cbe-a64e-96426c6200f2@isc.org>
Date: Tue, 22 Jul 2025 18:58:07 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: "Wessels, Duane" <dwessels@verisign.com>
References: <caa2df39-2483-464f-9802-24d66555866f@isc.org> <765AAB57-5C95-437D-863D-19C7DA77BCEF@verisign.com>
Content-Language: en-US
From: Petr Špaček <pspacek@isc.org>
Autocrypt: addr=pspacek@isc.org; keydata= xsFNBF/OJ/4BEAC0jP/EShRZtcI9KmzVK4IoD/GEDtcaNEEQzPt05G8xtC0P4uteXUwW8jaB CdcKIKR4eUJw3wdXXScLNlyh0i+gm5mIvKPrBYNAMOGGnkbAmMQOt9Q+TyGeTSSGiAjfvd/N nYg7L/KjVbG0sp6pAWVORMpR0oChHflzKSjvJITCGdpwagxSffU2HeWrLN7ePES6gPbtZ8HY KHUqjWZQsXLkMFw4yj8ZXuGarLwdBMB7V/9YHVkatJPjTsP8ZE723rV18iLiMvBqh4XtReEP 0vGQgiHnLnKs+reDiFy0cSOG0lpUWVGI50znu/gBuZRtTAE0LfMa0oAYaq997Y4k+na6JvHK hhaZMy82cD4YUa/xNnUPMXJjkJOBV4ghz/58GiT32lj4rdccjQO4zlvtjltjp9MTOFbRNI+I FCf9bykANotR+2BzttYKuCcred+Q7+wSDp9FQDdpUOiGnzT8oQukOuqiEh3J8hinHPGhtovH V22D0cU6T/u9mzvYoULhExPvXZglCLEuM0dACtjVsoyDkFVnTTupaPVuORgoW7nyNl0wDrII ILBqUBwzCdhQpYnyARSjx0gWSG1AQBKkk5SHQBqi1RAYC38M59SkpH0IKj+SaZbUJnuqshXh UIbY1GMHbW/GDhz7pNQFFYm2S4OPUBcmh/0O0Osma151/HjF7wARAQABzR9QZXRyIMWgcGHE jWVrIDxwc3BhY2VrQGlzYy5vcmc+wsGXBBMBCABBAhsDBQsJCAcCBhUKCQgLAgQWAgMBAh4B AheAAhkBFiEEEVO2++xeDVoSYmDzq9WHzfBlga4FAmd7vqsFCQmG4S0ACgkQq9WHzfBlga5H dA//SNIJAXyYxpoIrQwtTSOded93J+CIYHd2ArxCsS+ZXzeaSkHcqp2QfneLY2yyiQwjeivu MfqEBIASNZ94T+4OjhEHAFaAUJQtYMY7qmH69Q5h1PQMk/HZX4QNEDB6dihjz4wunB2mRcac GnRziAQUAnlHSSZDU2EtTddmRYTCaeX9rU8O5ja0+qPBJket7PjS0yT8DQJF+aKRsQz17ywT 3rNR7NBgeKrkBud4/zE7VRoxSRCPkWkgixEog+AotZt22psgQTv+kWx89+7cTiFZaLMmtV6v Ws8QTpDRDM3hCJBCI6qk61k8SLuQ+5VuVWBM/ozoN1ON2J9anxVTrxhNsFM3RLHV/Qh9p/0y T4our7JxB6dsos3HtlRR2npXS1PMrrXt7ZnnfYao+9zbOrZHC7NRY3feaLhieLx1pKmdDRHT CAbqaGnqX22hYYemtYFzSAv7stCdqdncAEkZJy4HByjQwFVGn8A6rp7H1xV2LmlkNAMEoWrT GJ+wH8A+VA3qbZF9Ab8Ht2GRj3mQQ4h8NnRYjKyqecCQOI5Xmn4S61nQ9y+wOBUSTlAQ6a5n LmMpCVe2/D4pWFxpUxc1z8Hq+uEN95sPgbihiSdgBR50DRdqW57ulFHA9LKJ0AEnBtQfvVth qAkvG8iBYl+UpoX1xW+dbX2g6nI5Rbx8u+EojKXOwU0EX84n/gEQANARNXihDNc1fLNFZK5s O14Yg2TouK9eo9gGh4yLSrmZ3pjtnuJSpTWmGD4g0EYzhwWA/T+CqjUnrhsvzLQ1ECYVqLpM VqK2OJ9PhLRbx1ITd4SKO/0xvXFkUqDTIF6a5mUCXH5DzTQGSmJwcjoRv3ye+Z1lDzOKJ+Qr gDHM2WLGlSZAVGcUeD1S2Mp/FroNOjGzrFXsUhOBNMo8PSC4ap0ZgYeVBq5aiMaQex0r+uM4 45S1z5N2nkNRYlUARkfKirqQxJ4mtj5XPC/jtdaUiMzvnwcMmLAwPlDNYiU0kO5IqJFBdzmJ yjzomVk1zK9AYS/woeIxETs+s6o7qXtMGGIoMWr6pirpHk4Wgp4TS02BSTSmNzParrFxLpEU dFKq3M0IsBCVGvfNgWL2pKKQVq34fwuBhJFQAigR9B3O9mfaeejrqt73Crp0ng0+Q74+Llzj EIJLOHYTMISTJyxYzhMCQlgPkKoj+TSVkRzBZoYFkUt4OXvlFj73wkeqeF8Z1YWoOCIjwXH9 0u2lPEq0cRHHyK+KSeH1zQJ4xgj0QDGPmkvi81D13sRaaNu3uSfXEDrdYYc+TSZd2bVh2VCr xrcfzQ1uz9fsdC9NPdNd7/mHvcAaNc5e9IhNh67L54aMBkzlJi18d0sWXOOHkyLSvbHnC/OP wv7qCf69PUJmtoeHABEBAAHCwXwEGAEIACYCGwwWIQQRU7b77F4NWhJiYPOr1YfN8GWBrgUC Z3u+zwUJCYbhUQAKCRCr1YfN8GWBrmljD/45mvtqiWzATkikxkJjTlxfhJBGUFXUoPXqvo8l 8zACTTnn6/K7v1TcFmtSHtLqQiTGwwq1vGQSjEG+UFzdXohex9MTv+7JHr+fcQfxFtxYeVGn k9fSkRkIdtpUzuCnBC27VYbq5S+nk4+ophmjm7rFVWd4tz+XTFZkuHTRImWxbaF9EZ/fuWmm XaICw+lzGan9BteM1ZSLIjzSPd7LoG55SuoVtAV91J5oLPo6KDOzgPEffalm2LJo7+ZaAeW6 diQUXxQpvAAROR/l1D1DIIQ0OJOqv0QRFyHt/zBbKgWmGaTQqF5aNab4ukVAt0LMsCkCjA11 HhcUnUwrixHR4V8G3UlHTQsWReiXfPerv/BewTsPHSzIfmufNlrBDfS/uIYdwquZfhOSsK9Z DUJFkaHudJC6tRVQ5LBVFqjgtZDllpAj1cOG7WmlTwHblj/r2+LMpOVHApByNkehEOA2c4Bn tcQ/8qSeorJCyd1/5A5+bUFIfIAJbRz4Ja21JgH107oCMX3hsGEzMnuwplYTf9NP4Dq0FQhK vkXzdnDhhXef8nUqF7l32hj9x1BCLFZ4FFe6iuKD7Q9p83Ca1HDdxauIrsrXTsEr1bjg2o/A JXI4A3sUunmiIf/tu+3riXUhA10P1IG11yEQ4y9ogE6knvOraRBwZ8gvFT7J2YLXJrF5mQ==
In-Reply-To: <765AAB57-5C95-437D-863D-19C7DA77BCEF@verisign.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Message-ID-Hash: TV4AMADOOAQSX5CWYM2NVE5ELYOQDBIN
X-Message-ID-Hash: TV4AMADOOAQSX5CWYM2NVE5ELYOQDBIN
X-MailFrom: pspacek@isc.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "dnsop@ietf.org" <dnsop@ietf.org>, Roy Arends <roy@dnss.ec>, dd <dd@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: [dd] Root DS/DELEG query
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/BXatftHrmFn_xILW3-EQK1aDt4o>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>
On 22. 07. 25 18:26, Wessels, Duane wrote: > > >> On Jul 22, 2025, at 6:11 PM, Petr Špaček <pspacek@isc.org> wrote: >> >> Hi all. >> >> I wonder how to interpret '. DS'/'. DELEG' queries and welcome opinions! >> ... >> With strict interpretation of 'DS lives at parent' I would argue '. DS' should result in SERVFAIL: No parent for . can be contacted. >> ... >> Needless to say implementations vary in their responses. > > You’re asking for clarity on what a recursive resolver should return in this case, and not what an authoritative server should return for an $ORIGIN/DS query, right? Yes please. I don't see ambiguity in definition for auths. Resolvers and validators are giving me trouble. -- Petr Špaček
- [DNSOP] Root DS/DELEG query Petr Špaček
- [DNSOP] Re: [dd] Root DS/DELEG query Mark Andrews
- [DNSOP] Re: [dd] Root DS/DELEG query Wessels, Duane
- [DNSOP] Re: [dd] Root DS/DELEG query Philip Homburg
- [DNSOP] Re: [dd] Root DS/DELEG query Petr Špaček
- [DNSOP] Re: [dd] Root DS/DELEG query Mark Andrews
- [DNSOP] Re: [Ext] [dd] Re: Root DS/DELEG query Paul Hoffman
- [DNSOP] Re: [dd] Re: [Ext] Re: Root DS/DELEG query Philip Homburg
- [DNSOP] Re: [dd] Re: [Ext] Re: Root DS/DELEG query Petr Špaček
- [DNSOP] Re: [dd] [Ext] Re: Root DS/DELEG query Mark Andrews