Re: [DNSOP] followup and proposed actions: RFC 6761 interim and next steps

Bob Harold <rharolde@umich.edu> Thu, 28 May 2015 17:53 UTC

Return-Path: <rharolde@umich.edu>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42FE51A86E6 for <dnsop@ietfa.amsl.com>; Thu, 28 May 2015 10:53:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.978
X-Spam-Level:
X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tmdD_DUvxAMN for <dnsop@ietfa.amsl.com>; Thu, 28 May 2015 10:53:01 -0700 (PDT)
Received: from mail-yk0-f170.google.com (mail-yk0-f170.google.com [209.85.160.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54B4E1A8771 for <dnsop@ietf.org>; Thu, 28 May 2015 10:52:59 -0700 (PDT)
Received: by yken206 with SMTP id n206so15041100yke.2 for <dnsop@ietf.org>; Thu, 28 May 2015 10:52:58 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=tgVaMXIA9RWwWy9nCoJW8clSNYFu2mnQd+gM9xkjh7Y=; b=DRbiIRtX+CT6qFXj2lEmDfMjcnf06IlG8vr7SBtgshquQdwlh7zIX1hnVPOojhW80X 3umkvpu04UP8EdQhKjBYLo/4G4qe/vyzOGOKu6lj1XFi/g566dnzCukTjCBODIhw42x0 rSlVt/4bHrozVC8Hw8v2+kgMrXcOxMDEDcLXoL0GxD20Io8kvEKf2pOfVrOLuWjs3wBm 5GP9kJVQaXh/TdBNBtCrM+KEeJp84P2JOxRKyoYACespSbgPXpgoZ4RJhA9SDGbgrWfj ETLYtDJhgV7NV3t9wTUcF2UcybL5wileiuDzmkcZgP7EDJWqLk1q/XmnN+SSQWFmdz4k ZenA==
X-Gm-Message-State: ALoCoQk4gRAeOwcs3R4a2faD45OYsNWbnqnTeojSoYAclNzM/4e5Nm9clL3us5rSwu3LDEA+vbhR
MIME-Version: 1.0
X-Received: by 10.170.127.7 with SMTP id t7mr4397530ykb.41.1432835578481; Thu, 28 May 2015 10:52:58 -0700 (PDT)
Received: by 10.129.76.144 with HTTP; Thu, 28 May 2015 10:52:58 -0700 (PDT)
In-Reply-To: <7FBF3D8B-E340-4540-A8B4-4786FB3E39C4@gmail.com>
References: <0CB7A66E-B6C9-4FE7-8452-172A5CF48895@gmail.com> <F28C4DE3-12CF-462D-BB55-5A02CA364173@interisle.net> <47EE9472-3E0C-4FA8-A058-8A288675C936@uniregistry.com> <E3483DBB-7F69-4CEB-ACD4-545B3CF7D4E0@INTERISLE.NET> <7FBF3D8B-E340-4540-A8B4-4786FB3E39C4@gmail.com>
Date: Thu, 28 May 2015 13:52:58 -0400
Message-ID: <CA+nkc8A0PXfzbsF2C85P4ngdY4_zRS2Z1b78O9fvro_ohPw0QQ@mail.gmail.com>
From: Bob Harold <rharolde@umich.edu>
To: Suzanne Woolf <suzworldwide@gmail.com>
Content-Type: multipart/alternative; boundary="001a11395048ad62220517280763"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/GAy-K257C06Z9--tkltOqJ-jNGo>
Cc: dnsop WG <dnsop@ietf.org>
Subject: Re: [DNSOP] followup and proposed actions: RFC 6761 interim and next steps
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 May 2015 17:53:04 -0000

On Thu, May 28, 2015 at 11:17 AM, Suzanne Woolf <suzworldwide@gmail.com>
wrote:

> (no hats, as I haven't discussed with my co-chair and AD.)
>
> ...
> It would be helpful to me in discerning consensus to separate two
> different concepts here.
>
> 1. Delegating home/corp/mail in the root zone would be bad.
> 2. Adding home/corp/mail to the special-use name registry would be good.
>

I support "2".


> Again, trying my best to speak as a disinterested observer of the
> discussion, I've seen little support for such delegations(1). I've seen a
> couple of arguments that seem to have strong support against such
> delegations.
>
> However, that's not the question in front of the WG. The IETF doesn't
> decide what goes into the root zone. ICANN does, and appears to have
> already decided (stipulating that not everyone believes them, which strikes
> me as a separate problem) not to add those names to the root zone.
>
> The question in front of the WG is whether to propose adding those names
> to the IETF registry for special-use names(2). I've heard support for that,
> but I've also heard a number of objections to such additions, and I'm
> having trouble telling how much the support for (2) is really support for
> (1) or vice versa.
>
> It remains less than obvious to me what outcome is being sought here. I
> first thought it was to influence the body that *does* decide what goes
> into the root zone against a possible future change in policy, but it's
> also been repeatedly asserted that no, the proposal is motivated by
> operational considerations.
>
> I realize I may be dim, but what operational impact is sought here?  What
> change in server or resolver configuration are administrators expected to
> make? Is there some other possible source of name collisions besides a
> change in the root zone that we can or should be guarding against? Given
> that the problem people seem concerned about developed entirely outside of
> any action by the IETF, how does the IETF acting now help?
>

The operational impact sought here includes changes to software:   "name
resolution APIs and libraries" and "caching domain name server software"
and "authoritative domain name server software" all "SHOULD restrict these
names to local resolution and SHOULD NOT allow queries for strings that use
these Special-Use Domain Names to be forwarded to the public DNS for
resolution."
-- and change to policy: --
"Requests to register any names added to the Special-Use Domain Name
registry as part of the IANA Considerations section of this document MUST
be denied."

>
> I understand the argument that the IETF can and should prevent such a
> misstep by ICANN, so reiterating it won't help me.
>
> thanks,
> Suzanne
>
>
-- 
Bob Harold