Re: [DNSOP] Status of "let localhost be localhost"?

Ted Lemon <mellon@fugue.com> Sun, 13 August 2017 18:09 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB15213268A for <dnsop@ietfa.amsl.com>; Sun, 13 Aug 2017 11:09:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LgZ9uu5RF5Dk for <dnsop@ietfa.amsl.com>; Sun, 13 Aug 2017 11:09:06 -0700 (PDT)
Received: from mail-qt0-x236.google.com (mail-qt0-x236.google.com [IPv6:2607:f8b0:400d:c0d::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05F1E132664 for <dnsop@ietf.org>; Sun, 13 Aug 2017 11:09:05 -0700 (PDT)
Received: by mail-qt0-x236.google.com with SMTP id v29so42512936qtv.3 for <dnsop@ietf.org>; Sun, 13 Aug 2017 11:09:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=MGBzTw6z67b+NvTE6NpqWmE/DozJlZnFOZZTKAEJbkE=; b=TkECJ29EBMlVw7295kQI9UQn/CqVDLVnfWUvTyV8rX1Y3RCgJlZcMzDDk58SI3zrjb 2/+NkbaYSu0RaDydkosPyJaYrcb0aridig8wbpo2vlu7qotNDZns4P/6s4n7aNUwOA1m 6+v8vm/kWECTxoE3TfaC+UEIdN7avUWrZAwo9aljzCl+hvUV+SJ8HMznTP4bplzIFEte EMdE4TLUkU3SXzXZhaWs1ADIF7bzaamagn8m7OCyzHPgkrpHQvdIiSNLjB8chxxeR2Pi QRZWZchWq6+7ZpKqe5qNTnAbSq2E+7kfPTcTmVssg/6lJSTF/lfHWP5THg2WNqByV6of 8dmA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=MGBzTw6z67b+NvTE6NpqWmE/DozJlZnFOZZTKAEJbkE=; b=P73IPIO2YXhFVvTwgnj9YCT7i27zSpikhbmKxAk97XDaKiiyKieY6gC4lyh42zao6o fRMAmfjwM+Q+W+bmczAjHj8DLreoCASU431y9bp64TQGn2EjqJxjI0qKEww/kPynxEyS B+bDBIxJYORSlsJykNdX0aSqOhRVptHjoz0eKAr9R98EWxPB5//uh7NFgrL5T3ISJl0O hthr3AR5A+6VmBTkWmd7YR/mSkZit11VV12+iSswF3uMR1jzoruCBnGKou4yr+nC5K+4 TDpKaY7eyQheSAqaRyMbOEFThJkfdDNYZWPrulqdgoYpXEUcq6dVFP0ALMRKHSB68jbV UaPA==
X-Gm-Message-State: AHYfb5hy79LSOnK9rOLrDO7J8yE+Lxl4D2kxYrFdAfydtm5d3ymhM0JA jttGuMPz9eraDDXX
X-Received: by 10.200.43.213 with SMTP id n21mr28404301qtn.142.1502647745028; Sun, 13 Aug 2017 11:09:05 -0700 (PDT)
Received: from [10.0.30.153] (c-73-167-64-188.hsd1.ma.comcast.net. [73.167.64.188]) by smtp.gmail.com with ESMTPSA id u22sm4115936qth.43.2017.08.13.11.09.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 13 Aug 2017 11:09:03 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <642396E7-7473-4859-BCA7-94EC8E12AFDF@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_1C208C13-71D0-4A1A-B8A1-6FA6F4E450D2"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Sun, 13 Aug 2017 14:09:02 -0400
In-Reply-To: <C12D3CFC-74DF-49C1-8947-863D49EEEEA5@dotat.at>
Cc: Paul Hoffman <paul.hoffman@vpnc.org>, dnsop <dnsop@ietf.org>
To: Tony Finch <dot@dotat.at>
References: <20170812170958.14197.qmail@ary.lan> <B21C539E-75AF-43F1-B6B0-4BDC25C6D670@fugue.com> <4544C6A8-5591-454F-9E94-F3CADD3CDD2D@vpnc.org> <42C048AD-E5BC-4D13-BE26-F9ED5D049FC9@fugue.com> <C12D3CFC-74DF-49C1-8947-863D49EEEEA5@dotat.at>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/G7nLW2VR-JmSReoIsNAAPaeEP6o>
Subject: Re: [DNSOP] Status of "let localhost be localhost"?
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 13 Aug 2017 18:09:08 -0000

El 13 ag 2017, a les 13:19, Tony Finch <dot@dotat.at> va escriure:
> RFC 6761 requires recursive servers to return positive 127.0.0.1 and ::1 responses, not NXDOMAIN. I can't see an explanation in the draft for the change to NXDOMAIN.

The reason to return NXDOMAIN is that it causes stub resolvers that look localhost up using DNS to fail, which is what should happen.   It is incorrect to look up localhost in the DNS.   Failure is preferred in this case.