IETF Logo Mail Archive

Re: [DNSOP] draft-hardaker-dnsop-private-namespace-options

John Levine <johnl@taugh.com> Tue, 03 November 2020 01:50 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B596B3A132B for <dnsop@ietfa.amsl.com>; Mon, 2 Nov 2020 17:50:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.85
X-Spam-Level:
X-Spam-Status: No, score=-1.85 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b=jlGboju4; dkim=pass (2048-bit key) header.d=taugh.com header.b=Q/JnGojf
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EdRoM1aQ45yF for <dnsop@ietfa.amsl.com>; Mon, 2 Nov 2020 17:50:28 -0800 (PST)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD2A63A132A for <dnsop@ietf.org>; Mon, 2 Nov 2020 17:50:27 -0800 (PST)
Received: (qmail 95048 invoked from network); 3 Nov 2020 01:50:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=17346.5fa0b762.k2011; bh=M4NySx1ulQzDKU9Vd9JjVynLIH9/MJANfa4MqSTVfKo=; b=jlGboju4Fi/SButUOszxBGtya3kSgnv7zLFJZs4lw1qGXNBDj6eZNpo95KGeH6tmnRgLGNygLEWaOhhwdfyfy/zA2ECwz0E44gBGrXtei2Q8jaVknyzJeHzGmuM9IcEBB0qrPn71/1lQ3+WelcjKhFuJLbZ8VyGirCOzWexD1XPXH311dGMsMGjRZ600QsbYwWk66F//LRdIKBzNHXVUEWnNr5ee2rXlwZtLkDY6IQxGnN7BixYO80zZLTfvVbOfFgs5CKccy5X3D5WmaxMHzBkeX8XO2mEioBKOTK0BC9okJSQPC+Yifk4HesrZn5PdkndF67JuxhK11Mva2WV+Nw==
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:cleverness; s=17346.5fa0b762.k2011; bh=M4NySx1ulQzDKU9Vd9JjVynLIH9/MJANfa4MqSTVfKo=; b=Q/JnGojf/bM1sciVNpjKw+xzVBEpz5dV/3BiVMI1n8S552jaMF3+05f6so2+aR5PXDNNkuDfboaM2nizpDeA51MyhWuQ7O/4tOVolVkCYJj0U+9V9Yu2uf98eo9hKzTKDt6Np5sXp8h4tAXBankbSDLmQOuG8LptxHZxTtVwesLKlQNkZnfvGyemkIT+XvC/LcMrZcIFIaYX4trqEBb7MbvTizHJHjEI/tFO9rDaaM1A5rWn5X78yPdxmqNSoQ7PsG++ozYmJemE67sDMTll09Vtr2GiTPHHTa4sdighPTt6GXDgKGqq3Z6iUVOWfyWAZt3qH5M/t9Y7quht5ZRReQ==
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.2 ECDHE-RSA AES-256-GCM AEAD) via TCP6; 03 Nov 2020 01:50:26 -0000
Received: by ary.qy (Postfix, from userid 501) id C13472549D56; Mon, 2 Nov 2020 20:50:25 -0500 (EST)
Date: Mon, 02 Nov 2020 20:50:25 -0500
Message-Id: <20201103015025.C13472549D56@ary.qy>
From: John Levine <johnl@taugh.com>
To: dnsop@ietf.org
Cc: wjhns1@hardakers.net
In-Reply-To: <yblsg9r8jaw.fsf@w7.hardakers.net>
Organization: Taughannock Networks
X-Headerized: yes
Cleverness: minimal
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/K9QuF-suE4_Gl-jNwSWcehtpYlA>
Subject: Re: [DNSOP] draft-hardaker-dnsop-private-namespace-options
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Nov 2020 01:50:31 -0000

In article <yblsg9r8jaw.fsf@w7.hardakers.net> you write:
>
>I've been thinking for a while what approach to take with respect to
>private name spaces.  This document summarizes some of my thinking, and
>draws some conclusions (that will likely poke some bears and beehives at
>the same time).

Having been around this barn a few times I'm inclined to take a more
hard-assed approach and say that if you want to use a private TLD and
DNSSEC, it's up to you to figure out how to manage the trust anchors.
This means no unsigned delegation or anything else in the root.

R's,
John

v2.23.0 | Report a Bug | By Email