Re: [DNSOP] draft-ietf-dnsop-kskroll-sentinel-07

Geoff Huston <gih@apnic.net> Fri, 23 March 2018 09:21 UTC

Return-Path: <gih@apnic.net>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DF8112D877 for <dnsop@ietfa.amsl.com>; Fri, 23 Mar 2018 02:21:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=apnic.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gS6RrfQXniyS for <dnsop@ietfa.amsl.com>; Fri, 23 Mar 2018 02:21:43 -0700 (PDT)
Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-hk2apc01on0044.outbound.protection.outlook.com [104.47.124.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E83B1241F8 for <dnsop@ietf.org>; Fri, 23 Mar 2018 02:21:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apnic.onmicrosoft.com; s=selector1-apnic-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=5nKyTHWs/WS6Uz2+AgAabfKGdJcsp9HDiK08bBbg8Ac=; b=GAGQ0p/M+1rlmUQr44GM+Fv5MD+e1vjwa1HwbxHBnMdD+V3V2+6mmFxnQlFg8J3O/o0PbbbErWQmkZpCoECr61DsSVR4YuFpGvjw8wqsAlhPz8GIpp/JdVvWksaNfcKfjxbatClQscFVNYK5fW44MrIWm3Yir7+mXFtq63Fq+HI=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=gih@apnic.net;
Received: from [IPv6:2001:67c:1232:144:5c69:d487:795e:a640] (2001:67c:1232:144:5c69:d487:795e:a640) by SIXPR04MB0697.apcprd04.prod.outlook.com (2a01:111:e400:51ee::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Fri, 23 Mar 2018 09:21:38 +0000
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
From: Geoff Huston <gih@apnic.net>
In-Reply-To: <83786E94-ABCA-43F9-A038-F8F61C93E797@isc.org>
Date: Fri, 23 Mar 2018 09:21:14 +0000
Cc: dnsop <dnsop@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <783C0A50-0DC5-4BC6-A105-F19D2BEF98E4@apnic.net>
References: <83786E94-ABCA-43F9-A038-F8F61C93E797@isc.org>
To: Mark Andrews <marka@isc.org>
X-Mailer: Apple Mail (2.3445.5.20)
X-Originating-IP: [2001:67c:1232:144:5c69:d487:795e:a640]
X-ClientProxiedBy: HE1PR05CA0213.eurprd05.prod.outlook.com (2603:10a6:3:fa::13) To SIXPR04MB0697.apcprd04.prod.outlook.com (2a01:111:e400:51ee::20)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 390d31bb-debb-4190-2a78-08d5909f7bdd
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:SIXPR04MB0697;
X-Microsoft-Exchange-Diagnostics: 1; SIXPR04MB0697; 3:ZGhq85RiTnlgLIUexhOWUOzLwtWsXVAaqh0MmHDZE7DrpcRLbjyn6I4S2BB0wNnhwUpNp/8PWp0doB4cyQU/RE90472zoEIV1Va3mjiW7D4iiAsSIzkn06gCL2Q/h1qkhg20CNPglC7dZHHmcVxw/OORKlUBfJAOJwWK9W3rViPc994EOPuteLCkD5pihc+GLI79XR+DidvV+PEzAGjyV0ijYxZ/oj7HmvspkPOND/xDs/G9Jm25r6DCz9WdYoTR; 25:kf4DopYa79iwxVCR3Oo+tZ2qxGqt2vUOUAgQ/VMpPWXGB00J6Tr7+/tgZEHUY97Ggd9VRKgnuQOCOKI8TlmpVoHYUg/r/sIGCx9G7fBEpzvUfe1MmZ63x2BYBnzmmHmgSrg+QigSJX1ArBYZxtbuj8LCl5oMmcRG9zP2RKnIP4tsdlRSpBraHGzn9VnjRWOl+UCtpBX0KgICRoS9d9x75qxYRGKnBAK+BSaZUi+oflSef7NIGnPng6cKJ/qMI9c/zNPeHM2fnxSfLxBV8A2EBdCKYx+OBwD3MkIP1mayyJye9SfZRedVj2vrxAPDD4YERrHpw9Jq4edJT9WAa2ifuA==; 31:FNAN2fHgJvZUbEywIEEJfoqXHPTJ/6GnnL3tTwE9dSouqXpHPOGGw32DfhNa3O5aseTmPWGkCG4F9S/5OvcX9BOuqXcjO5/5AvDt70lnnd6Bgl3q9AZWuAoGeDVJZV1GGo1hGXOLCiuFVaWP1wk3+vECVSZXZjl5PyzmRiKjU1A0RSYgYnuBGFrY/2QIpIB/VKcc+/ooQOtQOEgTAo7YQC4Hope9VLmeLvQBlq+uNI8=
X-MS-TrafficTypeDiagnostic: SIXPR04MB0697:
X-Microsoft-Antispam-PRVS: <SIXPR04MB06976B07BFFBAEED387E4A7FB8A80@SIXPR04MB0697.apcprd04.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(3231221)(944501327)(52105095)(6041310)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:SIXPR04MB0697; BCL:0; PCL:0; RULEID:; SRVR:SIXPR04MB0697;
X-Microsoft-Exchange-Diagnostics: 1; SIXPR04MB0697; 4:L/Ioc4/h+mLQEHN5IuM+vS0OUPWXTR4GOrYAMvYjlvW3gwHT/qxHR9hJvzrrhm/KZpuny6P5qvNROjr6B/GdNfXE04LRZqGom287rC4MTQVu76C3CykyHlQN0+qcIJq2+a2ZG2m9bv0CHHmJLdiPTo3/Gf55Frdt/cuh+Ug9ofcPdlJXhqtq2xVNVHjVS0c/3AO+gEw3MvUjnNDF2SDh8GybvHDRQeRmaHwXPhT0TNhzODMWhGoMyAxLj2eIWloWk0pQAnx/NhdhFe6FGol8cg==
X-Forefront-PRVS: 0620CADDF3
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(376002)(39840400004)(396003)(39380400002)(346002)(366004)(189003)(199004)(25786009)(53546011)(105586002)(81166006)(316002)(33656002)(23676004)(6486002)(305945005)(6246003)(57306001)(53936002)(11346002)(106356001)(8676002)(2906002)(8936002)(7736002)(8746002)(47776003)(4326008)(50226002)(2486003)(46003)(52116002)(386003)(229853002)(52146003)(6666003)(1706002)(5660300001)(6916009)(186003)(52396003)(81156014)(76176011)(86362001)(6116002)(68736007)(97736004)(82746002)(50466002)(478600001)(83716003)(36756003)(16526019)(446003)(42262002); DIR:OUT; SFP:1101; SCL:1; SRVR:SIXPR04MB0697; H:[IPv6:2001:67c:1232:144:5c69:d487:795e:a640]; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
Received-SPF: None (protection.outlook.com: apnic.net does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;SIXPR04MB0697;23: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
X-Microsoft-Antispam-Message-Info: z4zG1I456bR2p9NOHsa28dWdflU18kEdW5uzpccrU69R5/oTz+Bo2kv18qf/+l0/msyEqxWAIC/G0FWtKPKGxoIt/IspUB7VM9EFoGCCJ3JAmlnaQCuTzercElmYvPMITwayTSp3MKnYM2mlIOPB/PZ+oNAsbILL1IRkcDGYah6JOpsPc27KE21+HYMzKAsc
X-Microsoft-Exchange-Diagnostics: 1; SIXPR04MB0697; 6:DO2z051oexl4Yxoi8fe44jBAPn9MF4KRxbgGGB+gLF+HvGvD02WK8UHMTo0R3PY9YK/RZStX44fzvSWolypk59jMgLbHYYcM4AhM/gP/+AZD1wXDNINug6Gy58dPaSVSYWEXyV0hAwiYZetk2twCgIQiS01faR2/MT6lOxGX2qkxpXlqF5sqVxPYFv1WlO0k1W16sMK3fbz7ysXCTOk6XroP51lYQfg+m2nX13V4AmN0i7Z2hs5cXiS726mrLvvWv0C96VusLQqz6GvFYPQ3jwzpD3OIEtlQmw6as4Wo12gaIhvg3ArhmXk1LvAZTOTWfhPi7VljIKT0TCPWoK6BCctKDurWR+PAGzpLGlqQNb4=; 5:kvvYdL9DvbtK2BvCT1PJaqD9STQQEQ4U79vt+Hll//OZBleAZXehQqeoCezUdVfRcmjRLVKAYLhJ3XkMpnZTKMo/1fKUKz5zjRJ3WUr6ok6aI4bFHGa1InGXi8iE81jCId5UnVmWyvj2UcjSRY9nw7khOL7jPlDCokm7knVsc50=; 24:zi0TjzbNSCLUo5VpugGufk8EfCRKJ2xxUd/kVS5wUFf6yREMVfoDMDsPvxcK9cqfLnKVgZsqTSiyChvwVPjGVQIADl28vONMpCLARzS1vs4=; 7:nHE41YKVRUjZM/d8s3fsXx616Qac1wDyv4s2z/K7+yd/EHadiJZzV387nR+AuYsLfpaO+3JfABe95WUzcQCjyLPv0eprNNOmVRsCuQTd+4vn7+zlzggspR9od4/ZbD2uv7ZExE25PNVEP0o7OfX/KKKyVftNPTaAeRswujHKqzSD3n1N34fK11zeT1NYmrvAII4qdSPs4sZuty0UjCZHpmWfyoPa4YZSI3cZcKbF4afESOlbQQWZ+4580rVqSsf4
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: apnic.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Mar 2018 09:21:38.4772 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 390d31bb-debb-4190-2a78-08d5909f7bdd
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 127d8d0d-7ccf-473d-ab09-6e44ad752ded
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SIXPR04MB0697
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/CZjJK1zPkDpHbJhz0Rl-b3AX4qo>
Subject: Re: [DNSOP] draft-ietf-dnsop-kskroll-sentinel-07
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Mar 2018 09:21:47 -0000


> On 23 Mar 2018, at 12:55 am, Mark Andrews <marka@isc.org> wrote:
> 
> This title of this document DOES NOT match reality.
> 
> "A Sentinel for Detecting Trusted Keys in DNSSEC” should be
> replaced by “A Root Key Trust Anchor Sentinel for DNSSEC”.
> 
> kskroll-sentinel-<what>-<id> really needs something other
> than “kskroll” as the first field.  “root-key-sentinal-<what>-<id>”
> really more clearly matches what it does.
> 
> Any other changes that follow from these two changes”
> 

I personally think this is getting into bike shedding at this point.

The title of the document is an adequate description of the content
and folk who want to know more should read the document, not guess
from the title!

The label is a piece of syntactic convenience and is entirely
arbitrary. We could start an almost infinite discussion thread
over which label is better, but in the end its just a label.


regards,

    Geoff