IETF Logo Mail Archive

[DNSOP] Re: [v6ops] Re: Re: Re: Re: Re: Moving DNS64 (RFC6147) to Internet Standard

Brian E Carpenter <brian.e.carpenter@gmail.com> Tue, 14 April 2026 22:20 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 98653DC584B0 for <dnsop@mail2.ietf.org>; Tue, 14 Apr 2026 15:20:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776205259; bh=zpSUvLgPWpAENG7nOO8bhHRsUnZd9IimRujA891xnoQ=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=y8FJypScptCJWcv0FvIMfP9A46bAHQpOCvOIHGCi9RJO6hodDlsGjAXGWsyyYsGrP V+aXTJtVzRTXZeHw4OY1tDZD5t6C6c+4RB+98tE1Gj/2zUTaaK7UDXhNfRm9fhUgPT PT6jYMvyKEyOA2apmfbsr1DQxvIJ5MYD9KDLMCVo=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8SB6lOpW34Cz for <dnsop@mail2.ietf.org>; Tue, 14 Apr 2026 15:20:59 -0700 (PDT)
Received: from mail-pg1-x52e.google.com (mail-pg1-x52e.google.com [IPv6:2607:f8b0:4864:20::52e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 9C277DC58288 for <dnsop@ietf.org>; Tue, 14 Apr 2026 15:19:02 -0700 (PDT)
Received: by mail-pg1-x52e.google.com with SMTP id 41be03b00d2f7-c76ffd06593so4110160a12.0 for <dnsop@ietf.org>; Tue, 14 Apr 2026 15:19:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1776205136; x=1776809936; darn=ietf.org; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=zpSUvLgPWpAENG7nOO8bhHRsUnZd9IimRujA891xnoQ=; b=Y5ekIqN4o0VcfuWxQSnW1V7ROAeb6mCHoTG9sWE4N1ZC68KPGFHXK95qCBeJHpZPN8 MZ4kZBJFEwusEpTd3GXuMgLO2rvBpB5JuqLQAya10kdHePqCbRdyy/WN/pvclxfLVEYP xaio95LxOHEi0D5DLSA+XR2/bM2B1cXhcgoiIPwTHM/kDAcTemeM8vqFPDEqPTsZmq47 SV8dcOoHqHN8k2Cuv1zZ1XItbPsxNwCx6DjWbAh7kDWFcBVrcAeBvL7AuV86Y+s7TXFX /WpMrwxP0Yq+kIWp+jB0Y4MTYXPbrjdkAtZxNCq0F7pMhBLB7kw5/1PN2llWutpzEiZ+ ne6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776205136; x=1776809936; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=zpSUvLgPWpAENG7nOO8bhHRsUnZd9IimRujA891xnoQ=; b=Lk6A887UpCyj2jRxwOjTfrzQ8VnXEew525vB/Sh8gBDlbbiPa2RrP+EfobSbU4HJ8t zN+b2OzfKw9ZYE3X1zZYaJG5/ldvzdUfIZJayvDSVs/BIYDSw+Wu7/wmW2slTH+arAaf 6iKzJCqNFGQn5Ovh0bHtGpAtkuJ/jvu3kVO0VXWmy+SXsEffpuC9f4tqFIynD078/bJe UEHZMcT+XuW4OWWTayMZZyBG/Y5mKkC/sg5902g+2sN4NUlu16fVxyp9EDt0WXZjDvA3 1LdCQy3RyC41fdKCN28RXd7cfSCDIeFf9/Qd3LsPiOjby9UVUukSaAN8Do2IERZUTdzH pSoQ==
X-Forwarded-Encrypted: i=1; AFNElJ94VSm3u1lpuDOrUozdfa4I8E1y+6LprlZ8lYNHA4U4SnYU7dlGUPwGU1YOme9Qg+4B9pm9Ww==@ietf.org
X-Gm-Message-State: AOJu0YyXoEFJJVB5INjxQeXNvdONZeatrRb2TYQDoysD2BCISSqRqW11 IDJJ1nRsWJX+Y4hBxrhnhB6U5IQoZfa12i6zp12TOUoI5zl/X7AWw+eJ
X-Gm-Gg: AeBDieti70rcISaPMe8lTQSHBrwbCR2+7suzKe7HVkQhaF43/4jkzaqymK4mRlJRlNk 3REQatmT1qOxCT7loxkT7kqUtxz8ffxV3NsJjkb2JpxSZ4rDKnNZpa9Ug+Bkqq1ttFbM74fN5eY xOjMmnmf8Duqs5dqZvBsFRgkRMuenISdpE2nMivqEIfeKevZXB8deMjPIgVqZy5ONxgmmuascKS SNVJ8eQsJWvzLQmSNPAMBJK8fR5CrEr0eVfKWZYPWrmvZZNUgHCSuY517My8KfUUlJMVjvoosCq /ap/y2Iykd5aXOVB+NvQ8TFe50iRFMtmW4IXRXOMK6TbN3h6nmRGpNha5NNbQmHOYNWUQSyeYl6 HdVd+Z1xhuUUNFP9mNMREfNxwQ+2Zy013btXLvHda6x84VxoH5T1tc/mYavAgtMKpAzhfNAszVq AADZJ8dm+kCOCuoRpvSYicL2VDHtyo8ryPYZT9g55ZLdUn3P4ZmQrM6c+n4MXEgQYWKSuz3+1Jb bxtYr32WTMO4SfNk5Dv//OTR8C9
X-Received: by 2002:a05:6a20:a12c:b0:39f:66e8:670f with SMTP id adf61e73a8af0-39fe3f4c91dmr20882949637.39.1776205135933; Tue, 14 Apr 2026 15:18:55 -0700 (PDT)
Received: from ?IPV6:2404:4400:a100:1829:5956:ca53:df83:6568? ([2404:4400:a100:1829:5956:ca53:df83:6568]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-c7944cd52d0sm4385118a12.21.2026.04.14.15.18.52 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 14 Apr 2026 15:18:55 -0700 (PDT)
Message-ID: <f08f9b0b-52bd-487d-93a5-6f41e0a3da68@gmail.com>
Date: Wed, 15 Apr 2026 10:18:49 +1200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: Mark Andrews <marka@isc.org>, Ted Lemon <mellon@fugue.com>
References: <1133413B-3A85-40E8-9692-38EA538CD4AD@isc.org> <E2A431EF-B50C-48B0-966F-DB5771264685@isc.org>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
In-Reply-To: <E2A431EF-B50C-48B0-966F-DB5771264685@isc.org>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: base64
Message-ID-Hash: H47IYP4ZMZKW2CTYDJCNA7CBSG5WFQ7F
X-Message-ID-Hash: H47IYP4ZMZKW2CTYDJCNA7CBSG5WFQ7F
X-MailFrom: brian.e.carpenter@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Philip Homburg <pch-dnsop-7@u-1.phicoh.com>, dnsop@ietf.org, IPv6 Operations <v6ops@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: [v6ops] Re: Re: Re: Re: Re: Moving DNS64 (RFC6147) to Internet Standard
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/K67jP-pa9VLF0puPQm3WG12aHPo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

It seems to me that we need a draft on "DNS64 Considered Harmful".

Regards/Ngā mihi
    Brian Carpenter

On 15-Apr-26 09:20, Mark Andrews wrote:
> Continuing on:
> 
> I was using my iPhone as a hot spot and tests that just work when normally work just started falling.  This is all because people interfere with address lookups. We have decades of complaints about people interfering with address lookups.  There was the whole Site Finder snafu.
> 
> DNS64 “appears” to work because there are still not a lot of zones that are signed and most of them also are IPv6 enabled.  Add to that all the OS vendors that have been slack in deploying DNSSEC on the devices they ship.
> 
> Now BIND doesn’t do DNS64 as described.  It does an approximation of it.
> 
> DNS64 isn’t needed anywhere. 464XLAT doesn’t needed it.  Discovery of the prefix doesn’t need it. You can just publish an ip4only.arpa zone with the correct AAAA records.
> 
> Figuring out how to do DNS64 correctly  automatically is impossible even ignoring DNSSEC.  You just break things.

v2.43.4 | Report a Bug | By Email | System Status