Re: [DNSOP] ALT-TLD and (insecure) delgations.

Ted Lemon <mellon@fugue.com> Sat, 04 February 2017 14:13 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C2E2129ADF for <dnsop@ietfa.amsl.com>; Sat, 4 Feb 2017 06:13:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.7
X-Spam-Level:
X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PADNhdPdBDwa for <dnsop@ietfa.amsl.com>; Sat, 4 Feb 2017 06:13:04 -0800 (PST)
Received: from mail-qk0-x22a.google.com (mail-qk0-x22a.google.com [IPv6:2607:f8b0:400d:c09::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37E69129ADE for <dnsop@ietf.org>; Sat, 4 Feb 2017 06:13:04 -0800 (PST)
Received: by mail-qk0-x22a.google.com with SMTP id 11so17377650qkl.3 for <dnsop@ietf.org>; Sat, 04 Feb 2017 06:13:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=HexFQvrx1ze3eCgdSewL6tJVrGYQijwcQrBfbJFl4Yw=; b=0PDe3u4HFFen8TXMspMN1AXBy4DXXWZihkXjsg2N/KG+vPccK00TiXM7/XF79PZjxC yGBveoapJjxLf7Lci+LQyD5y2ihLea8JUB/T49kn7bLtf3y9Vvl+Hqv5qxUJBmJvTmah fZsxWO+MQcqmcD3BCWgWvDVgSNwmv13CxXEtmhtnKKwed3vKm6TuMfDuryZh9FAfZwK1 g+9aRPmr087AB0rxxY2Kn0hV7AwaZZ3BkND8jpozVU5MDEbZFhT4ccOqxz9bBcb1jI9Y LHSgkoig+CGVV0HRdcMVikZfp3MH5KK60umaQbu8F0LOAX72rkJLvEQDi9n+Ah7fLaTG ZyEA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=HexFQvrx1ze3eCgdSewL6tJVrGYQijwcQrBfbJFl4Yw=; b=q60oPPgeXurfB6COfWjM86QDebiWJr5oZcVeGcCeJ3rmXirbuRUWIpD9u+1TxHplXT L84Kbr8waaLTTeVlWUGOJSaizUG0s9ICmlOV2NK+UVMo8oSP2mENMS8h/fQSuaLJ3Z9T 1LudiJkoEIBcXNaWNzfjM3/hXOu7iD5jbYTK1gla1EAxi8FW+OFb2ZeG5OZgBHniYhS/ hHcRQPY8zrUnwZyN9Ab9tf4l73q1Uf/hETlaFPil7xqFkko3Fsq3xsQCFLuH33TmTMSv UuaHBNGBUDlEgn8+VFvHPgoFITKpSOW+CAOkUGeFGPqaOrVDB+93pb+KSpexRq3ES6Wx x41g==
X-Gm-Message-State: AMke39k1Bwn5QOeTKBWql+KfeUzKyAmR2g5QpZdsFkiqqP2cYGj908mVMmAy5ObfK+fhaA==
X-Received: by 10.233.220.134 with SMTP id q128mr1857368qkf.220.1486217583277; Sat, 04 Feb 2017 06:13:03 -0800 (PST)
Received: from [10.0.20.229] (c-73-167-64-188.hsd1.ma.comcast.net. [73.167.64.188]) by smtp.gmail.com with ESMTPSA id 34sm27704264qtx.16.2017.02.04.06.13.01 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 04 Feb 2017 06:13:02 -0800 (PST)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <FC290D26-14C9-41BF-99E4-121FDB531FD7@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_E4D645E3-544F-4498-8DE8-35B3A2664276"
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
Date: Sat, 04 Feb 2017 09:13:00 -0500
In-Reply-To: <0c9ea76d-a541-943a-d72e-bfe255d57259@bellis.me.uk>
To: Ray Bellis <ray@bellis.me.uk>
References: <CAHw9_i+8PA3FQx8FqW-xQ_96it7k-g5UrMB7fxARUi1gwQ++hw@mail.gmail.com> <20170201204455.6nymmjlj5lzq2ect@mycre.ws> <CAHw9_iJ50jWgsAe+hRKUtubfAtpt7+GEeCKEASzypcf86+4nYA@mail.gmail.com> <20170204015158.GB67739@mx2.yitter.info> <5BB1A3F5-5EFB-4164-9720-68E262E58636@fugue.com> <20170204021353.GF67739@mx2.yitter.info> <0c9ea76d-a541-943a-d72e-bfe255d57259@bellis.me.uk>
X-Mailer: Apple Mail (2.3259)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/GXMBw1qQMyr1ThT8Np2TaseWGzs>
Cc: dnsop <dnsop@ietf.org>
Subject: Re: [DNSOP] ALT-TLD and (insecure) delgations.
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 04 Feb 2017 14:13:05 -0000

On Feb 4, 2017, at 4:46 AM, Ray Bellis <ray@bellis.me.uk> wrote:
> If it turns out that we can't get the insecure delegation that we need
> for .homenet, then I'd (personally) be reasonably happy with
> .homenet.alt, except that the current proposals for the use of .alt
> wouldn't seem to permit that.

.alt doesn't allow for reserved allocations, so I don't think this would fly.   Also, there won't be a .alt zone (correct me if I am wrong), so it doesn't actually solve the problem.