Re: [DNSOP] Alternative Special-Use TLD problem statement draft

["Adrien de Croy" <[e-mail]>]

------ Original Message ------
From: "Philip Homburg" <[e-mail]>
To: "[e-mail]" <[e-mail]>
Sent: 7/04/2016 3:05:26 a.m.
Subject: Re: [DNSOP] Alternative Special-Use TLD problem statement draft

>In your letter dated Wed, 6 Apr 2016 09:21:31 -0300 you wrote:
>>>  Strong dissensus here. The problem is there is no safe way to have 
>>>AND
>>>  KEEP such a name.
>>
>>Also, it would make very difficult to DNS programmers to keep track of
>>all these "special but not special" domain names.
>
>Personally, I consider naming systems developed outside the IETF a 
>problem.
>
>There should be no register, because they should not exist.
+1

>
>So any hint that there is a process for non-IETF naming systems should
>be removed.
>
>Naming at the root of the name space should develop very slowly. Slow
>enough that everybody (local name resolution, but also security 
>mechanisms)
>can adapt.
>
>These systems should be considered carefully for all implications 
>before they
>are deployed. And not just pop up.
I agree.

DNS namespace has worked basically unchanged for decades.

It's battle-hardened.

Now we decide that the DNS namespace is the one and only namespace and 
that we want other resolution protocols so therefore the DNS namespace 
has to be perverted.

And when I see arguments like the IETF should assign root names so that 
organisations who can't afford lawyers can retain perpetual rights over 
a branch of the namespace I have to shake my head.

At the very least can we not segment this off into a single root?

E.g.

have a separate registry for other protocols which all fit under .notdns

I think the security implications of a resolver checking some internet 
source for a machine readable list of the latest special use names have 
not even been considered, and I think it has the potential for some 
serious problems.  What problem(s) are we trying to solve, and what 
problems are we creating by trying to solve it.

Adrien

>
>
>_______________________________________________
>DNSOP mailing list
>[e-mail]
>https://www.ietf.org/mailman/listinfo/dnsop