IETF Logo Mail Archive

Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...

Joe Abley <jabley@hopcount.ca> Fri, 22 May 2020 14:44 UTC

Return-Path: <jabley@hopcount.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB08C3A0B06 for <dnsop@ietfa.amsl.com>; Fri, 22 May 2020 07:44:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=hopcount.ca
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lNZDrLed6ne5 for <dnsop@ietfa.amsl.com>; Fri, 22 May 2020 07:44:17 -0700 (PDT)
Received: from mail-qt1-x835.google.com (mail-qt1-x835.google.com [IPv6:2607:f8b0:4864:20::835]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD21B3A0B00 for <dnsop@ietf.org>; Fri, 22 May 2020 07:44:17 -0700 (PDT)
Received: by mail-qt1-x835.google.com with SMTP id l1so8434500qtp.6 for <dnsop@ietf.org>; Fri, 22 May 2020 07:44:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hopcount.ca; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=X7Odz+GZo6UhCQIOxuk9/kI3kYNLKhM8cb3gEcMCJBw=; b=CqhTo8JXbWfmD6dRy4aoBzadf4oAj3FV8Qbt18v8+8meIxTcVVBacmAPxog1dYq4Mk Q2wpnV0mTjwjodXpGSLcsnbtrZS1/pzTdzHLC/lWzWmb649LMM5dDr/GDoxTcCKSmVBe wx8FwBY+6W1YjUPihk41fJrGRMoqX2fgOc2dk=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=X7Odz+GZo6UhCQIOxuk9/kI3kYNLKhM8cb3gEcMCJBw=; b=d1Fm2YBvRE936PrsdDPBm+aCXmmmxsp7pkIHRsq5t23bYEOc2nS8KJAM7ROMqr87P3 bg5oRaUeOH9qsNT2Ww95ThgTAsPW9LSVfkAMopiKsBoP9Dyg6T1RAtvRCktagIoso41p hwuPf5ZleQarCWYw1rU6I/R3VHKFfO3pr7p9jm6EM656fFgtbuOWl8u2r1ValWiBqpTN MXeSPjHH6W1MdtztaPqWGTIhnF5SadFxCmbFrkSVS9qvPoH+TyK1DC+twZn/EtQWz4lG lGuger1VfQcRNOwvI3X4ZmljgtSROG2E6J4a+/XhTL4SkmNH7O6HhbXQV3QpvDCUq2MB MwOg==
X-Gm-Message-State: AOAM533Hk/KvMli5nVCh7WaWwr2WPPEhxEVZCZjgIaX51lL7cpSHatqd M4JdZST8p8QezhNwmhI+IFtbtPBRoBCyQpop
X-Google-Smtp-Source: ABdhPJwNk2nW0LzcbivGxHyeS4Qd02IgLDxQjC+ajFjpOvdEhX3GTuEi3U201YuyR0gjmAW03LXNtA==
X-Received: by 2002:ac8:326d:: with SMTP id y42mr15903184qta.243.1590158656431; Fri, 22 May 2020 07:44:16 -0700 (PDT)
Received: from ?IPv6:2607:f2c0:e784:c7:dc08:d905:3ae2:aab9? ([2607:f2c0:e784:c7:dc08:d905:3ae2:aab9]) by smtp.gmail.com with ESMTPSA id h185sm6056544qkd.80.2020.05.22.07.44.15 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 May 2020 07:44:15 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
From: Joe Abley <jabley@hopcount.ca>
In-Reply-To: <alpine.DEB.2.20.2005221345180.25154@grey.csi.cam.ac.uk>
Date: Fri, 22 May 2020 10:44:14 -0400
Cc: John R Levine <johnl@taugh.com>, dnsop <dnsop@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <52A07992-DF42-4029-ADE7-E6B27BEBCA34@hopcount.ca>
References: <CAHw9_i+UsV9NkuPM4KYBZhO7_J78MkUEyVR3fr=vOX-vsjJeUA@mail.gmail.com> <20200521214124.271EC197E0DF@ary.qy> <CAHw9_iKVkD4ORCc_DWSPXww6R43oL_N8TE3F6R-9YQuw1SAfjQ@mail.gmail.com> <alpine.OSX.2.22.407.2005211842300.6195@ary.qy> <alpine.DEB.2.20.2005221345180.25154@grey.csi.cam.ac.uk>
To: Tony Finch <dot@dotat.at>
X-Mailer: Apple Mail (2.3608.80.23.2.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/LqvSWpgdtRSc5pMa2Uc5eD8aV_I>
Subject: Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 May 2020 14:44:19 -0000

Hi Tony,

On 22 May 2020, at 08:47, Tony Finch <dot@dotat.at> wrote:

> John R Levine <johnl@taugh.com> wrote:
>> 
>> A week or two ago I scannned TLD zone files to see how many signed A and AAAA
>> records there were.  Quite a lot, most looks to be orphan glue in Afilias
>> zones that they didn't delete after the registered zone went away.
> 
> I vaguely remember a policy change in .com and .net years ago when they
> stopped including orphan glue in the zones. Was this to do with prep work
> for DNSSEC? I'm slightly surprised .org didn't follow suit.

I think the change you remember was a change in the way that responses were returned from the Atlas nameserver. Once upon a time, glue was returned in the answer section alongside a referral. The change I am thinking of changed that behaviour to follow other implementations, returning glue in the additional section instead.

ORG has not been served using the Atlas nameserver since the redelegation to PIR.


Joe

v2.30.2 | Report a Bug | By Email | System Status