Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01
Mark Andrews <marka@isc.org> Wed, 20 August 2014 23:51 UTC
Return-Path: <marka@isc.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EF2A1A0649; Wed, 20 Aug 2014 16:51:30 -0700 (PDT)
X-Quarantine-ID: <EoA_4ZPaeYG0>
X-Virus-Scanned: amavisd-new at amsl.com
X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "Cc"
X-Spam-Flag: NO
X-Spam-Score: -0.269
X-Spam-Level:
X-Spam-Status: No, score=-0.269 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MANGLED_WANT=2.3, RP_MATCHES_RCVD=-0.668, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EoA_4ZPaeYG0; Wed, 20 Aug 2014 16:51:28 -0700 (PDT)
Received: from mx.ams1.isc.org (mx.ams1.isc.org [IPv6:2001:500:60::65]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE5A41A0422; Wed, 20 Aug 2014 16:51:27 -0700 (PDT)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) by mx.ams1.isc.org (Postfix) with ESMTP id 001471FCAF3; Wed, 20 Aug 2014 23:51:23 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id A2DBB160069; Thu, 21 Aug 2014 00:02:41 +0000 (UTC)
Received: from rock.dv.isc.org (c211-30-183-50.carlnfd1.nsw.optusnet.com.au [211.30.183.50]) by zmx1.isc.org (Postfix) with ESMTPSA id 3A720160059; Thu, 21 Aug 2014 00:02:41 +0000 (UTC)
Received: from rock.dv.isc.org (localhost [IPv6:::1]) by rock.dv.isc.org (Postfix) with ESMTP id E952B1D1B042; Thu, 21 Aug 2014 09:51:18 +1000 (EST)
To: Joe Abley <jabley@hopcount.ca>
From: Mark Andrews <marka@isc.org>
References: <20140814001610.3124D1CC688D@rock.dv.isc.org> <86AC48C0-4DFF-4286-A9B1-2A6BE3D14BDC@hopcount.ca> <20140814160453.1C7931CCE03D@rock.dv.isc.org> <7EA38D42-3915-403E-AFE3-C0A8E4A391BF@hopcount.ca> <Prayer.1.3.5.1408201750020.12368@hermes-1.csi.cam.ac.uk> <19AE3CB3-B108-42CB-BAE2-A2F1FBB55EF4@hopcount.ca> <20140820214845.70AEA1D1A20E@rock.dv.isc.org> <E4AD7D21-995C-46B1-813E-70CA0919F6CE@hopcount.ca>
In-reply-to: Your message of "Wed, 20 Aug 2014 19:29:12 -0400." <E4AD7D21-995C-46B1-813E-70CA0919F6CE@hopcount.ca>
Date: Thu, 21 Aug 2014 09:51:18 +1000
Message-Id: <20140820235118.E952B1D1B042@rock.dv.isc.org>
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsop/CbtEU8yEomP-iFRThY9G3DYUq4o
Cc: dnsop@ietf.org, "cet1@cam.ac.uk Thompson" <cet1@cam.ac.uk>, iesg@ietf.org
Subject: Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Aug 2014 23:51:30 -0000
In message <E4AD7D21-995C-46B1-813E-70CA0919F6CE@hopcount.ca>, Joe Abley writes
:
>
> On 20 Aug 2014, at 17:48, Mark Andrews <marka@isc.org> wrote:
>
> > You will give answers that validate as bogus in the stub resolver.
>
> This seems to be the crux of our differing world views.
>
> > A validating stub resolver
>
> Validating stub resolvers?
>
> In my own personal taxonomy a stub resolver doesn't validate. Validation
> signalling is available from a validating resolver (e.g. using the AD
> bit, of which I am not a fan), and that resolver (validating or not) is
> where I was suggesting the locally-relevant data would be served.
>
> (Note that I'm not saying that my own personal taxonomy is of any use to
> anybody apart from me; I'm just putting it out there by way of
> explanation of the current forehead wrinkles. I continue to think it
> would be good to have a common understanding of these overloaded terms.)
>
> Anyway, I'm not arguing against the idea of making certain delegations
> verifiably insecure. I think any of us could write up an I-D with an IANA
> Considerations section that specified the correct behaviour, if we want
> to do this properly with a documentation trail. (Maybe the nice IANA DNS
> Operations people could be convinced to make the change anyway without or
> in advance of documentation, but I tend to think that documentation is
> good in general.)
IANA should have enough from RFC6598 as it says that lookups shouldn't
go to the Internet and they only way for that to work with validating
resolvers is to break the DNSSEC chain of trust. It is a implict
instuction but it is a instruction.
Or we could finish !@$!#$!@#@R!EW!RQ@ processing this document and
IANA will follow the explict instructions in RFC6303. It has passed
wg last call on January 3rd, 2014 and stalled!
I don't see any Q@#R#!@##$ point in writing a third document.
Yes, I'm !@#RQWRET!$#R!@# annoyed.
"On Dec 7, 2013, at 5:59 AM, Tim Wicinski <tim.wicinski at teamaol.com> wrote:
We're kicking off the Working Group Last call on Adding 100.64.0.0/10 prefixes to IPv4 Locally-Served DNS Zones Registry. The author believe that this document has addressed all the issues raised on the document. The latest version of the draft is available at:
http://www.ietf.org/id/draft-ietf-dnsop-rfc6598-rfc6303-00.txt
http://tools.ietf.org/html/draft-ietf-dnsop-rfc6598-rfc6303-00
Because of this last call is surrounded by the upcoming holiday season, we're making this a four (4) week last call cycle.
Substantive comments and statements of support/opposition for advancing this document should be directed to the mailing list. Editorial
suggestions can be sent directly to the authors. The chairs will send in their comments as well during the last call period. This last call will
conclude on January 3rd, 2014."
I had a previous document stall for *years* after last call passed
with dnsop as Peter just didn't do the writeup. I don't wan't the
same thing to happening for this document as well.
> Joe
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Mark Andrews
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 William F. Maton Sotomayor
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Dick Franks
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Joe Abley
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Mark Andrews
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Joe Abley
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Mark Andrews
- [DNSOP] Insecure delegations from 239.in-addr.arp… Chris Thompson
- Re: [DNSOP] Insecure delegations from 239.in-addr… Mark Andrews
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Chris Thompson
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Joe Abley
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Mark Andrews
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Joe Abley
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Mark Andrews
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Mark Andrews
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Andrew Sullivan
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Ted Lemon
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 David Conrad
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Mark Andrews
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Evan Hunt
- Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01 Mark Andrews