Re: [DNSOP] WG review of draft-ietf-homenet-dot-03

Russ Housley <housley@vigilsec.com> Mon, 20 March 2017 19:44 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B680D1292C5 for <dnsop@ietfa.amsl.com>; Mon, 20 Mar 2017 12:44:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N3XS2ny8Aw5m for <dnsop@ietfa.amsl.com>; Mon, 20 Mar 2017 12:44:42 -0700 (PDT)
Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A9E31274D2 for <dnsop@ietf.org>; Mon, 20 Mar 2017 12:44:42 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id AB9933004CC for <dnsop@ietf.org>; Mon, 20 Mar 2017 15:44:41 -0400 (EDT)
X-Virus-Scanned: amavisd-new at mail.smeinc.net
Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id fS1MoE42w2e1 for <dnsop@ietf.org>; Mon, 20 Mar 2017 15:44:39 -0400 (EDT)
Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id BC853300254; Mon, 20 Mar 2017 15:44:39 -0400 (EDT)
From: Russ Housley <housley@vigilsec.com>
Message-Id: <F7AA49EF-2708-4948-9B60-6660DA6BC841@vigilsec.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_41DDE756-91C1-4F04-9BCC-417558496D1B"
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
Date: Mon, 20 Mar 2017 15:44:39 -0400
In-Reply-To: <CEC8CC6A-861A-471C-B7FA-4BB05C81CCF0@gmail.com>
Cc: dnsop <dnsop@ietf.org>, Terry Manderson <terry.manderson@icann.org>
To: Ralph Droms <rdroms.ietf@gmail.com>
References: <1E14B142-680B-4E30-809B-68E03EB6E326@gmail.com> <61FD3EE3-3043-4AB1-9823-6A9D61B1438C@vigilsec.com> <BE2A3845-D8AA-433A-9F00-1056ECFD335F@fugue.com> <21C8F856-FE3F-42A6-A8ED-888D0797B68B@vigilsec.com> <60C85486-E351-4C42-ADEB-FCBB56F4EA27@fugue.com> <AB11455F-7E43-4CB3-9F13-DB6A09F739EB@vigilsec.com> <CEC8CC6A-861A-471C-B7FA-4BB05C81CCF0@gmail.com>
X-Mailer: Apple Mail (2.3259)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/E4-xu623ixksuIW7TxZexz7ea1Q>
Subject: Re: [DNSOP] WG review of draft-ietf-homenet-dot-03
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Mar 2017 19:44:44 -0000

Ralph:

>>>> We have a different view of the intended purpose of the special-use TLD registry.  Sadly, the RFC does not include language that resolves this difference.
>>> 
>>> I understand that we have different views.   However, I am asking you specifically to articulate _your_ view.
>>> 
>>> You have said that in your opinion special-use names must not be published in the root zone, but that was already obvious from what you said previously.   What I am asking you to do is explain _why_ special-use names must not be published in the root zone.
>> 
>> There are other processes for adding names to the root zone.  In my opinion, using the special-use TLD registry as a means of putting a name, even one that has a different scope and use case, is an end run around that process.
> 
> Russ - In my opinion, the special-use domain registry is not being used to put the name in the root zone.  The observation is that the special-use definition of this TLD requires both an entry in the special-use domain name registry, and an entry in the root zone.  There is no process at present for adding such an entry to the root zone.  draft-ietf-homenet-dot-03 explicitly recognizes the lack of such a process and that a process may need to be developed.
> 
> Seems to me the important issue is that the entry in the root zone is required for correct operation of the locally-served .homenet zone, even if no process exists for creating that entry.  The appropriate parties can collaborate to develop any needed processes…

I would be fine with collaboration between the IETF and ICANN to come up with a way to make this happen, but that is not what this document says.

This document registeres the .homenet TLD in the special-use registry and then tasks IANA "to arrange for an insecure delegation for '.homenet' in the root zone.  This delegation MUST NOT be signed, …”

This document does not describe a collaborative approach.

Russ