Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...

John R Levine <johnl@taugh.com> Fri, 22 May 2020 13:24 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33C453A0366 for <dnsop@ietfa.amsl.com>; Fri, 22 May 2020 06:24:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1536-bit key) header.d=iecc.com header.b=jQphWFSI; dkim=pass (1536-bit key) header.d=taugh.com header.b=XymKDCbb
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12Ft-IvL-tV5 for <dnsop@ietfa.amsl.com>; Fri, 22 May 2020 06:24:54 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6913E3A0365 for <dnsop@ietf.org>; Fri, 22 May 2020 06:24:54 -0700 (PDT)
Received: (qmail 72028 invoked from network); 22 May 2020 13:24:52 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:user-agent; s=11959.5ec7d2a4.k2005; i=johnl-iecc.com@submit.iecc.com; bh=X+j1J5VbImrAhbgFlZyTmZHGKGFdWonWz9NpTqmBaBA=; b=jQphWFSIl9DH7QY86nKKQ3q2BU81C7+KpJwfmkPjZsXPt31y5ie07+SqDPtkBfM7DP00/qHksHabUJCJyU/1Budj0ZKp/p+7bW6oWY1Jn07FmE/5Wtni0GaAEjyYT7IcotjRb/M7up9sK2glSnZGrtd//YpkFIDLnrD5i75CW0HCilNoU2kesB/kzvp96fEs9sw8Cp4GUxYbZxDjFySTJppqZA3rXQQXV5VF1qrHMm6meGlo88lcIvjibZOvOUPP
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:user-agent; s=11959.5ec7d2a4.k2005; olt=johnl-iecc.com@submit.iecc.com; bh=X+j1J5VbImrAhbgFlZyTmZHGKGFdWonWz9NpTqmBaBA=; b=XymKDCbbdUVyhuxIVPqQC2OQ9RmXIK1k3vMsISYieRvCe7/fy15vIkYRsNietPBOwrLkYHOpSdXXHNlze88YNQZJFr9k4Mv45A/oucNtpfdMbPd2+19NU1kK7ZE/nphFqb3AU8eB+0bMuuNCVfxyTK6KxDRLrR6HmuhndTGNmZIrkMZfbBvWr5sFS0bGQF+KbzalTxlgc24Vqg6jmylKJuC4pisUqgDqHqwPewZPM/rt8IZDt/AsUo0Ks8Alwtdy
Received: from localhost ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPSA (TLS1.3 ECDHE-RSA AES-256-GCM AEAD, johnl@iecc.com) via TCP6; 22 May 2020 13:24:52 -0000
Date: Fri, 22 May 2020 09:24:51 -0400
Message-ID: <alpine.OSX.2.22.407.2005220923440.8719@ary.qy>
From: John R Levine <johnl@taugh.com>
To: Tony Finch <dot@dotat.at>
Cc: Warren Kumari <warren@kumari.net>, dnsop <dnsop@ietf.org>
In-Reply-To: <alpine.DEB.2.20.2005221345180.25154@grey.csi.cam.ac.uk>
References: <CAHw9_i+UsV9NkuPM4KYBZhO7_J78MkUEyVR3fr=vOX-vsjJeUA@mail.gmail.com> <20200521214124.271EC197E0DF@ary.qy> <CAHw9_iKVkD4ORCc_DWSPXww6R43oL_N8TE3F6R-9YQuw1SAfjQ@mail.gmail.com> <alpine.OSX.2.22.407.2005211842300.6195@ary.qy> <alpine.DEB.2.20.2005221345180.25154@grey.csi.cam.ac.uk>
User-Agent: Alpine 2.22 (OSX 407 2020-02-09)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/FtrBKXGEpZ-5RoEtjJvd9tGqzgc>
Subject: Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 May 2020 13:24:56 -0000

On Fri, 22 May 2020, Tony Finch wrote:
> I vaguely remember a policy change in .com and .net years ago when they
> stopped including orphan glue in the zones. Was this to do with prep work
> for DNSSEC? I'm slightly surprised .org didn't follow suit.

I believe that the policy is to remove orphan glue, and the glue in the 
Afilias zones is due to software bugs.  It's not just .org, it's also 
.info and .mobi and other zones they manage directly.

Regards,
John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly