Re: [DNSOP] Benjamin Kaduk's No Objection on draft-ietf-dnsop-rfc2845bis-07: (with COMMENT)

Mark Andrews <marka@isc.org> Thu, 19 March 2020 05:03 UTC

Return-Path: <marka@isc.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58E633A220A; Wed, 18 Mar 2020 22:03:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PChUgR9Z0Yzq; Wed, 18 Mar 2020 22:03:14 -0700 (PDT)
Received: from mx.pao1.isc.org (mx.pao1.isc.org [149.20.64.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 969F13A2209; Wed, 18 Mar 2020 22:03:14 -0700 (PDT)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id AA2283AB0D2; Thu, 19 Mar 2020 05:03:12 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id 48258160043; Thu, 19 Mar 2020 05:03:14 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 2BF97160084; Thu, 19 Mar 2020 05:03:14 +0000 (UTC)
Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 6j-5yIp4v0tK; Thu, 19 Mar 2020 05:03:14 +0000 (UTC)
Received: from [172.30.42.69] (unknown [49.2.105.120]) by zmx1.isc.org (Postfix) with ESMTPSA id B51A3160043; Thu, 19 Mar 2020 05:03:12 +0000 (UTC)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
From: Mark Andrews <marka@isc.org>
In-Reply-To: <158459059567.29645.11526836011177929598@ietfa.amsl.com>
Date: Thu, 19 Mar 2020 16:03:08 +1100
Cc: The IESG <iesg@ietf.org>, dnsop-chairs@ietf.org, dnsop@ietf.org, draft-ietf-dnsop-rfc2845bis@ietf.org, benno@NLnetLabs.nl
Content-Transfer-Encoding: quoted-printable
Message-Id: <7DBD7C7D-2FFC-4B98-820B-D7C513C76EA9@isc.org>
References: <158459059567.29645.11526836011177929598@ietfa.amsl.com>
To: Benjamin Kaduk <kaduk@mit.edu>
X-Mailer: Apple Mail (2.3445.9.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/DVOq6XDqBQ-StjQKWOLLPai6bP0>
Subject: Re: [DNSOP] Benjamin Kaduk's No Objection on draft-ietf-dnsop-rfc2845bis-07: (with COMMENT)
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Mar 2020 05:03:17 -0000


> On 19 Mar 2020, at 15:03, Benjamin Kaduk via Datatracker <noreply@ietf.org> wrote:
> 
>         *  Other Len - an unsigned 16-bit integer specifying the length
>            of the "Other Data" field in octets.
> 
>         *  Other Data - this unsigned 48-bit integer field will be
>            empty unless the content of the Error field is BADTIME, in
>            which case it will contain the server's current time as the
>            number of seconds since 00:00 on 1970-01-01 UTC, ignoring
>            leap seconds (see Section 5.2.3).
> 
> I'm slightly confused at the interplay between the explicit length field
> and the "empty unless" directive.  Does this mean that the only allowed
> values in the "Other Len" are 0 and 6?  Does "empty" mean "length-zero”?

The only current use of this field is to pass the time which is 48 bits.

Potential future use is covered in draft-andrews-dnsop-defeat-frag-attack-00
to provide a transaction nonce.

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka@isc.org