Re: [DNSOP] draft-liman-tld-names-04

Alfred Hönes <ah@TR-Sys.de> Wed, 24 November 2010 16:16 UTC

Return-Path: <A.Hoenes@TR-Sys.de>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2F61228C275 for <dnsop@core3.amsl.com>; Wed, 24 Nov 2010 08:16:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -98.463
X-Spam-Level:
X-Spam-Status: No, score=-98.463 tagged_above=-999 required=5 tests=[AWL=0.286, BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, HELO_EQ_DE=0.35, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uJwIGYxj0Vss for <dnsop@core3.amsl.com>; Wed, 24 Nov 2010 08:16:02 -0800 (PST)
Received: from TR-Sys.de (gateway.tr-sys.de [213.178.172.147]) by core3.amsl.com (Postfix) with ESMTP id D31B628C277 for <dnsop@ietf.org>; Wed, 24 Nov 2010 08:16:01 -0800 (PST)
Received: from ZEUS.TR-Sys.de by w. with ESMTP ($Revision: 1.37.109.26 $/16.3.2) id AA283305402; Wed, 24 Nov 2010 17:16:42 +0100
Received: (from ah@localhost) by z.TR-Sys.de (8.9.3 (PHNE_25183)/8.7.3) id RAA26483; Wed, 24 Nov 2010 17:16:41 +0100 (MEZ)
From: Alfred Hönes <ah@TR-Sys.de>
Message-Id: <201011241616.RAA26483@TR-Sys.de>
To: dnsop@ietf.org
Date: Wed, 24 Nov 2010 17:16:41 +0100
X-Mailer: ELM [$Revision: 1.17.214.3 $]
Mime-Version: 1.0
Content-Type: text/plain; charset="hp-roman8"
Content-Transfer-Encoding: 7bit
Subject: Re: [DNSOP] draft-liman-tld-names-04
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Nov 2010 16:16:04 -0000

Folks,

Widespread diverse restrictions in devices/implementations/applications
with an expected residual lifetime in the order of a another decade
_are_ technical restrictions, not policy.

All work on DNS I have followed in the recent years always was under
the umbrella of conserving compatibility with deployed systems,
and the costs for doing that indeed sometimes were really high.
This was justified.
Robustness has to remain the guiding principle when "tuning" the DNS.

One of the obligations we have in the IETF is, IMHO, to take care
of transparency, to avoid introducing fragility that hampers
communication between users all over the world.
That's an engineering aspect, and hence a technical aspect, not policy.

We are faced with a scenario where some few voices want to open the
doors wide to challenge the force of storms.
Isn't is better engineering practice to keep the door almost closed,
open it only a small slot wide -- just so much as current needs have
been identified --, and observe what happens, before undertaking the
next step?
If the storm breathes in and destroys your ... (here: ability for all
to communicate using all assigned domain names), you likely won't be
able to close the door back far enough to restitute something
resembling the "status quo ante"!


Andrew Sullivan spoke:

> I think Joe's pragmatic approach is the right one: document right now
> that whatever the restrictions might historically have been, we are
> quite explicitly going to permit at the very least one class of
> labels.

+1

> If people feel strongly that in fact the TLD label restriction never
> was there and should not be, then once this document is published you
> all can go out and write the draft, "TLD label character restrictions
> considered harmful", and pursue the publication of that as an RFC.  In
> the meantime, we have at least a technical document that makes clear
> that certain things are permitted.

+1

Looking through another pair of glasses, this seems to be a simple
application of the robustness principle:
  -  be conservative in what you send
     (frequently: "MUST set to 0, unless future specs say otherwise",
     and here: be conservative in what labels are allowed to be
     placed in the public DNS), but
  -  be liberal in what you accept
     (frequently: "MUST ignore the value, to allow for future
     extensions",
     and here: educate implementers that they should get rid of
     restrictions that prohibit future extension of the set of
     possible labels to be expected)
If you want to define an extension later for the 'originating' side,
it is prudent to check for adherence to the "be liberal" principle
on the 'consumer' side before you do it.


Kind regards,
  Alfred.

-- 

+------------------------+--------------------------------------------+
| TR-Sys Alfred Hoenes   |  Alfred Hoenes   Dipl.-Math., Dipl.-Phys.  |
| Gerlinger Strasse 12   |  Phone: (+49)7156/9635-0, Fax: -18         |
| D-71254  Ditzingen     |  E-Mail:  ah@TR-Sys.de                     |
+------------------------+--------------------------------------------+