[DNSOP] Re: on the more general problem of delegating to other namespaces in the DNS

Joe Abley <jabley@strandkip.nl> Tue, 22 July 2025 16:45 UTC

Return-Path: <jabley@strandkip.nl>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 4A65D48ADAD4 for <dnsop@mail2.ietf.org>; Tue, 22 Jul 2025 09:45:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=strandkip.nl
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lEYjeWCbLxZF for <dnsop@mail2.ietf.org>; Tue, 22 Jul 2025 09:45:24 -0700 (PDT)
Received: from dane.soverin.net (dane.soverin.net [185.233.34.11]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5E45248AC74D for <dnsop@ietf.org>; Tue, 22 Jul 2025 09:43:04 -0700 (PDT)
Received: from smtp.soverin.net (unknown [10.10.4.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by dane.soverin.net (Postfix) with ESMTPS id 4bmjkH2Wv4z1WFV; Tue, 22 Jul 2025 16:43:03 +0000 (UTC)
Received: from smtp.soverin.net (smtp.soverin.net [10.10.4.99]) by soverin.net (Postfix) with ESMTPSA id 4bmjkH0c9yzM7; Tue, 22 Jul 2025 16:43:03 +0000 (UTC)
Authentication-Results: smtp.soverin.net; dkim=pass (2048-bit key; unprotected) header.d=strandkip.nl header.i=@strandkip.nl header.a=rsa-sha256 header.s=soverin1 header.b=n97BkE6r; dkim-atps=neutral
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=strandkip.nl; s=soverin1; t=1753202583; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=YIk2GlghJx8b4dqfCGZi8iD+uEeuux1zEDHBZKQMZoM=; b=n97BkE6rgiZTBxDcLMrBrST3Vn20ZQR5lquJVqYdnkI6UeRCB/yr5EwU1F2WFzs5WQEoyX BjTposzLZOD0YRRkjpo8ut1mU4cclfldkzoWfpCDoPZx08ePWUSWjwfSvYeLX1+8jUVxQa ycR2MFWM7BGdkdsjuCj5BsWVLuAj6yUBUbxGuzeKNRgHY4XdC7F9oldn0NIOO16aH/90/S 3vydpf0bywk13rFlP84eaOswNhhg+My08KodVfCS5PxonjSHuIkwI6jVqnlEnu7fvaHOU3 HayglzkXwU1c25ECGyqYj9XbnMFrJDo3KHXuSL4wMrB72tyVyIRfhxL+KE353A==
X-CM-Envelope: MS4xfPG+Gr5dyPXm8BZ/PpDQ5hQF2ujkfn89CPf3N8Cks5mIQKPkOWC+d0NMtJJwyWXlH+S+spGIjKfD6yl7mu3Ti15bOgl8MwccE3yNVKG4sc9AEx+tf0gz jCraGQeExZWgk60MDsx+ug+dJGJSjWI5lHSnI9f+jyk+r07ubIT+Pyxf7v3TY5BXs6V7FlwQqnFxd9qqJW2DnKe5GThbiBQifvai7mPTIeUYr86RW8rFPgsa Vjqocl4J76Que1mPsqhG7SS19PcWtE2Un6NFTH5OyF4=
X-CM-Analysis: v=2.4 cv=UsCZN/wB c=1 sm=1 tr=0 ts=687fbf97 a=uG43SaRrMjhza+SSdtxUug==:617 a=SxxV3wn7I6doZDQ4:21 a=xqWC_Br6kY4A:10 a=IkcTkHD0fZMA:10 a=SCo1hh1FAAAA:8 a=_1b2TPgfpZfe7D9pEzEA:9 a=QEXdDO2ut3YA:10 a=nwb-CePKZZm3gL-ai9HY:22 a=ADiJHLWpjGBBXEl7-v_j:22
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: Joe Abley <jabley@strandkip.nl>
Mime-Version: 1.0 (1.0)
Date: Tue, 22 Jul 2025 18:42:50 +0200
Message-Id: <97EB4E28-A101-47F4-8F6F-7EA4004EC893@strandkip.nl>
References: <4f9e293e-0663-4bc7-b8ea-5497c43e38b5@isc.org>
In-Reply-To: <4f9e293e-0663-4bc7-b8ea-5497c43e38b5@isc.org>
To: Petr Špaček <pspacek@isc.org>
X-Spampanel-Class: ham
Message-ID-Hash: R24D5CUJ3UYUZOZ76FF2QH2LLV6VSWT2
X-Message-ID-Hash: R24D5CUJ3UYUZOZ76FF2QH2LLV6VSWT2
X-MailFrom: jabley@strandkip.nl
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: dnsop@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: on the more general problem of delegating to other namespaces in the DNS
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/B_QHSmO-a-YUVhbWtt9iIL1s3WI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

On 22 Jul 2025, at 17:41, Petr Špaček <pspacek@isc.org> wrote:

> Having said that, I violently disagree with this:
> 
>> Because non-existence is a cacheable signal and unreachable is not.
> Sorry but this statement is as incorrect as it gets.

Thank you for the correction! No violence detected or required :-)

I think that in this case we are not actually talking about an unreachable server; we are talking about a server for which addresses cannot be resolved, so there is actually no ability to tell whether you can reach anything or not. So my answer was not very helpful. 

Thanks again!


Joe