Re: [DNSOP] .arpa

Ted Lemon <mellon@fugue.com> Thu, 23 March 2017 12:34 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18F001296E3 for <dnsop@ietfa.amsl.com>; Thu, 23 Mar 2017 05:34:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qg6KdZtQ57-b for <dnsop@ietfa.amsl.com>; Thu, 23 Mar 2017 05:34:18 -0700 (PDT)
Received: from mail-qt0-x233.google.com (mail-qt0-x233.google.com [IPv6:2607:f8b0:400d:c0d::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6EF131292C5 for <dnsop@ietf.org>; Thu, 23 Mar 2017 05:34:18 -0700 (PDT)
Received: by mail-qt0-x233.google.com with SMTP id n21so173793590qta.1 for <dnsop@ietf.org>; Thu, 23 Mar 2017 05:34:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=CeNetLCSOqN3xKWEf8AIEU0gVATO7hKveS1+Gx6NB1Y=; b=RnX67FDnGrLK5QdYa53Erc1kxAsOXN/NI53D+kknX11QGYtMSbuNPlOAXyxoNVkuMK cuAGPzfyvWHxhCHGIVjKobY0Z09TCC5hvJXphGKbIpPRKnszK15i6CDoBU/KsMn6bESq rv/w0iHjnoTuqS6B40orpzD3c22IY6g3T/3oT+8YnBuObhAllCsnwJ3EYrrpFMetjPJh P25lQwd2Fi6U0hDcx11PPLCQFOPprD87HOcHE9DgFhE7AxHHkibJyeFVSDJDaqcZKOU9 luKbo9Fqku4Y9fAGPr4gowywOeECeQYv2eb1I5s/dn2Jkr12I0UMLDjKyRzBVXIj/uje eJcg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=CeNetLCSOqN3xKWEf8AIEU0gVATO7hKveS1+Gx6NB1Y=; b=YUowScY3TlhW3yD5JaLjeu53+FEQqM0fruwi6NiS7y49PI7S53m4SQMpOPZHOFrRgp BKVCogyBQEW2MioDl1ySfayVvF3Z2Kf346bAZhsoH1vx5pim8ulXe20GLcgS1wJjrH1q V2VFqwmoWiSKBXfU9FFRwDeb7wWtd6118JSCnqXHfmr4kJOmbOgCVJpAGg6WXmqYiVw7 YJMza/Apk4Qznq3f3ltm/PTZvdzSD3NVW2llhU6eMC0imqMvAbh3ABWbfssfCgl3/Jhl DGFovsiF0ga4tvg6kqp8/ajfUXtWBFRIsp3P6dTszWIt442ooU6ng5YV27J/YrDB2gA1 jqZw==
X-Gm-Message-State: AFeK/H2GZ1PPBd6TPe9DPYCEQqmJQCHmvPyHFpa7GSc/aVAhuDguEQNmG3JDBwO9v6safg==
X-Received: by 10.237.62.98 with SMTP id m31mr2091500qtf.71.1490272457447; Thu, 23 Mar 2017 05:34:17 -0700 (PDT)
Received: from [10.0.20.228] (c-73-167-64-188.hsd1.nh.comcast.net. [73.167.64.188]) by smtp.gmail.com with ESMTPSA id x19sm3129342qtc.23.2017.03.23.05.34.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 23 Mar 2017 05:34:16 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <2C6B4EB6-D0F0-44A8-95E4-68DF32244639@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_7E52C281-D2E1-42BA-9EC5-912457E8627E"
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
Date: Thu, 23 Mar 2017 08:34:14 -0400
In-Reply-To: <20170323042741.79108.qmail@ary.lan>
Cc: dnsop@ietf.org, rdroms.ietf@gmail.com
To: John Levine <johnl@taugh.com>
References: <20170323042741.79108.qmail@ary.lan>
X-Mailer: Apple Mail (2.3259)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/K4MOkhSmyb7RTKwhZV4bPxCgA2E>
Subject: Re: [DNSOP] .arpa
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Mar 2017 12:34:21 -0000

On Mar 23, 2017, at 12:27 AM, John Levine <johnl@taugh.com> wrote:
>  - waits many, many years while ICANN does what ICANN does about anything new
> 
> At this point I see the only plausible options as choose .homenet and
> require all validating resolvers to special-case it, or choose
> .homenet.arpa and put whatever DNSSEC magic we need into .arpa.

The working group is aware of the "wait many years" part of this approach, and is willing to try and see.   If the working group sees no progress over the course of the next few years, we may shift to the latter approach.

At present, the former approach isn't necessary because hosts don't validate.   It could be argued that we are not treating this potential emergency seriously enough; one solution would indeed be to require that resolvers special-case .homenet, but if we are to do that, it would be good to have a complete specification for how that is done, and that would be in a follow-on document.