[DNSOP] Re: [EXTERNAL] Re: Call for Adoption: draft-davies-internal-tld

Philip Homburg <pch-dnsop-6@u-1.phicoh.com> Thu, 17 April 2025 15:42 UTC

Return-Path: <pch-b6CAFA0C7@u-1.phicoh.com>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 1D9DA1DAFCEF for <dnsop@mail2.ietf.org>; Thu, 17 Apr 2025 08:42:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=unavailable autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q53mFClg5AwF for <dnsop@mail2.ietf.org>; Thu, 17 Apr 2025 08:42:40 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [IPv6:2a10:3781:2413:1:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-ECDSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 7C5351DAFCEA for <dnsop@ietf.org>; Thu, 17 Apr 2025 08:42:40 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305) (Smail #158) id m1u5RNs-0000O9C; Thu, 17 Apr 2025 17:42:36 +0200
Message-Id: <m1u5RNs-0000O9C@stereo.hq.phicoh.net>
To: dnsop@ietf.org
From: Philip Homburg <pch-dnsop-6@u-1.phicoh.com>
Sender: pch-b6CAFA0C7@u-1.phicoh.com
References: <016201dbaee8$d1106580$73313080$@gmail.com> <B3F33508-46B5-4B19-A265-C4EAFE9D4000@strandkip.nl> <1C9E8ABA-4399-491B-A9F4-D9ACCB1BA72C@virtualized.org>
In-reply-to: Your message of "Thu, 17 Apr 2025 15:12:08 +0000 ." <1C9E8ABA-4399-491B-A9F4-D9ACCB1BA72C@virtualized.org>
Date: Thu, 17 Apr 2025 17:42:36 +0200
Message-ID-Hash: 6VREMU3K4DE2APRJZC2TJA2SK2AKLC2K
X-Message-ID-Hash: 6VREMU3K4DE2APRJZC2TJA2SK2AKLC2K
X-MailFrom: pch-b6CAFA0C7@u-1.phicoh.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: David Conrad <drc=40virtualized.org@dmarc.ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: [EXTERNAL] Re: Call for Adoption: draft-davies-internal-tld
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/KvdzFib57oYPHSgXHjlBGMrBfEE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

>As you're no doubt aware, there are 7 TLDs currently listed in
>https://www.iana.org/assignments/special-use-domain-names/special-use-domain-names.xhtml.
>Each of those can imply (but do not necessarily require) special
>handling, either in authoritative code, resolver code, or the
>surrounding client or server infrastructure. Given those seven, it
>seems silly to me to not add another TLD that may imply special
>handling by DNS developers or operators.

As far as I can tell those 7 (alt., example., invalid., local., localhost.,
onion. and test.) are not meant to be used in regular, production DNS.

local. is used for mDNS, alt. and onion. are specifically not DNS. And
example, invalid, localhost and test are all special in various ways.

Internal. is quite different. It is meant to be used for regular
DNS, just not on the Internet.

There is a bit of confusing language in RFC 6761:

4.  Caching DNS Servers:

    Are developers of caching domain name servers expected to make
    their implementations recognize these names as special and treat
    them differently?  If so, how?

What is important for internal is whether the server is a recursive
resolver or not. There are plenty of caching DNS servers that only
forward requests.

It seems to me that requiring action from caching forwarders is counter
productive. To make matters more complex, some software can be
recursive resolver or forwarded depending on the configuration.