Re: [DNSOP] Questions about draft-adpkja-dnsop-special-names-problem-00

Stephane Bortzmeyer <bortzmeyer@nic.fr> Wed, 04 November 2015 12:53 UTC

Return-Path: <bortzmeyer@nic.fr>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 725931B2EA4 for <dnsop@ietfa.amsl.com>; Wed, 4 Nov 2015 04:53:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q1ETPwU3oJKH for <dnsop@ietfa.amsl.com>; Wed, 4 Nov 2015 04:53:11 -0800 (PST)
Received: from mail.bortzmeyer.org (aetius.bortzmeyer.org [IPv6:2001:4b98:dc0:41:216:3eff:fece:1902]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D4AC1B2E87 for <dnsop@ietf.org>; Wed, 4 Nov 2015 04:53:11 -0800 (PST)
Received: by mail.bortzmeyer.org (Postfix, from userid 10) id 3D8253C7BF; Wed, 4 Nov 2015 13:53:09 +0100 (CET)
Received: by tyrion (Postfix, from userid 1000) id 3D050F003C5; Wed, 4 Nov 2015 13:52:17 +0100 (CET)
Date: Wed, 04 Nov 2015 21:52:17 +0900
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: dnsop@ietf.org
Message-ID: <20151104125217.GA26421@laperouse.bortzmeyer.org>
References: <20151104032027.GA28629@laperouse.bortzmeyer.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <20151104032027.GA28629@laperouse.bortzmeyer.org>
X-Transport: UUCP rules
X-Operating-System: Ubuntu 15.10 (wily)
X-Charlie: Je suis Charlie
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/MIRS1nimgwuxm3M5uGw707pHcNM>
Subject: Re: [DNSOP] Questions about draft-adpkja-dnsop-special-names-problem-00
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Nov 2015 12:53:13 -0000

On Wed, Nov 04, 2015 at 12:20:27PM +0900,
 Stephane Bortzmeyer <bortzmeyer@nic.fr> wrote 
 a message of 73 lines which said:

> draft-adpkja-dnsop-special-names-problem-00 raises several issues,

And I forgot one of the most important ones, but I remembered it
during a discussion over sashimi this evening (the sashimi were good,
thanks).

The entire section 2, about "switches" is questionable because using
.bit or .onion is not only to change the *resolution* protocol but
also (and specially) to change the *registration* process.

These are two different systems. Of course, they have some links (the
fact that domain names are organized into a tree is used by the DNS
protocol for fast resolution) but not identical. The current version
of the draft says "any TLD registered in IANA-maintained root-zone
(use DNS)" which is not quite exact. Names registered in the
RFC2826-root are often looked up through the DNS but not always (some
people use local hosts file or LDAP to do it). And, more important,
some TLDs outside of the RFC2826-root do not always indicate a
switch. This is the case of .bit (if you already know Namecoin, you
can skip the next paragraph).

Namecoin uses a blockchain to store registered names. That way, you
can have meaningful names without a registry. Because few clients
speak the Namecoin API, most of the times, name resolution is done
through the DNS: you set up a local authoritative name server to
export data from the blockchain into a .bit zone that you load.

This example clearly shows that the TLD is not a "protocol
switch". That's because Namecoin is intended to address perceived
problems with the registration system, not with the DNS.