IETF Logo Mail Archive

Re: [DNSOP] DNS for Cloud Resources in draft-ietf-rtgwg-net2cloud-problem-statement-08

Linda Dunbar <linda.dunbar@futurewei.com> Mon, 16 March 2020 17:00 UTC

Return-Path: <linda.dunbar@futurewei.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7FFC3A0D51; Mon, 16 Mar 2020 10:00:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=futurewei.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bII4SOrTWtg2; Mon, 16 Mar 2020 10:00:44 -0700 (PDT)
Received: from NAM04-SN1-obe.outbound.protection.outlook.com (mail-eopbgr700124.outbound.protection.outlook.com [40.107.70.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F7B03A0D4D; Mon, 16 Mar 2020 10:00:44 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=K12CKzYWuT5vtNNaE1QQJgMBopGWucMy+JnRbkEkBB0xeCwc+jiKRsdRAvBvWPNzcsGegSRvH633ikSJXyeiExq48nPizyImqLLKthdMqCUaD8d2eiwWT3dJJadAQMnwpLYQJZRUj2AFqO62oUl8GSBiT0kr39YjkEp30jY6H6DBrUn8p8h18k9oggt3lbQsmv+7rPwuEClfuds4oYwJII5Nzib0YjsrWS+6jVFjYaOUOYWvqxoqgMyt/gOKBxMdtiQe54VHzgn9JElzP5NbZvVH7awlbr2StMcc3wWjSDGDvLGCqpqQeMqaICgbXsuGiW91uZHRWmH9XtpKiHxNuw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=IOf/Ptwn+LqM/qzQDZRChimaZr6H79/gYJVQ73X6mL8=; b=hap0JLRa+81cdSyhW8rMFBdOkphR91QY0EAa1Z+svnJUIeVa3mY4WqhVoMy9QtmhxjbxI1SApefWSzWnAdXZSmzsvc2alSw6ju9ISQCbwbcpdbUPX3Kkhte0PW7sxVOqXO5qBnLOhw+q6QyiHImmE1yL/pWB6Ut0xM9c0GxF0tdE98QBj4ZYxqtD6tKUJCLXhCYmoWwKGrAU5KvwQniakD1DnKEeQZGI1z2/Hjb/B+iE4+Xays5R3O2fFi3ijxQIAQHGvyN7wA2RhuhdbLDNMxpwyI2Eo0P/syr/p4JmjNxqnc5o6ZkWcHn5BC8cDdfsAYLKB/0BNF9EOx5RmcdrYg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=futurewei.com; dmarc=pass action=none header.from=futurewei.com; dkim=pass header.d=futurewei.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Futurewei.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=IOf/Ptwn+LqM/qzQDZRChimaZr6H79/gYJVQ73X6mL8=; b=YeZX3g0NXiJfasd+1kiTsvQtYMmuG48p+OyIP21jAmqRJnqmPcoTO69At3Ii0UTXyZhEJqPJqsTdTwoC1i+gC3nENpXmTx63ixBd/wV9myh4894Py1mgEJ/RgCeD4JQLPLkKTWE2BdZ88FiqjlhF4tND+Q9DnRUflSUa3Rq/rpc=
Received: from MWHPR1301MB2096.namprd13.prod.outlook.com (2603:10b6:301:34::35) by MWHPR1301MB2125.namprd13.prod.outlook.com (2603:10b6:301:2e::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2835.10; Mon, 16 Mar 2020 17:00:40 +0000
Received: from MWHPR1301MB2096.namprd13.prod.outlook.com ([fe80::e893:a912:1d3a:5a33]) by MWHPR1301MB2096.namprd13.prod.outlook.com ([fe80::e893:a912:1d3a:5a33%6]) with mapi id 15.20.2814.007; Mon, 16 Mar 2020 17:00:40 +0000
From: Linda Dunbar <linda.dunbar@futurewei.com>
To: "Hollenbeck, Scott" <shollenbeck@verisign.com>
CC: "dnsop@ietf.org" <dnsop@ietf.org>, "rtgwg@ietf.org" <rtgwg@ietf.org>
Thread-Topic: DNS for Cloud Resources in draft-ietf-rtgwg-net2cloud-problem-statement-08
Thread-Index: AdX30T1GApKjttEGSSWK9TMIh4QhbwD4nIvw
Date: Mon, 16 Mar 2020 17:00:39 +0000
Message-ID: <MWHPR1301MB20968A1806026073CF54B7F485F90@MWHPR1301MB2096.namprd13.prod.outlook.com>
References: <a88c3dbefb2346239a4be8c11f37695f@verisign.com>
In-Reply-To: <a88c3dbefb2346239a4be8c11f37695f@verisign.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=linda.dunbar@futurewei.com;
x-originating-ip: [2605:6000:1526:d41e:9da2:d093:5345:56b3]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: e6eeb19e-985d-4166-6c5d-08d7c9cb8e6e
x-ms-traffictypediagnostic: MWHPR1301MB2125:
x-microsoft-antispam-prvs: <MWHPR1301MB2125D6F0CD51B23E1728D31485F90@MWHPR1301MB2125.namprd13.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 03449D5DD1
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(136003)(39840400004)(396003)(346002)(366004)(376002)(199004)(71200400001)(186003)(4326008)(66556008)(2906002)(66946007)(52536014)(64756008)(66476007)(66446008)(5660300002)(76116006)(9686003)(8936002)(316002)(81156014)(81166006)(54906003)(53546011)(8676002)(45080400002)(33656002)(6506007)(478600001)(7696005)(86362001)(44832011)(966005)(55016002)(6916009); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR1301MB2125; H:MWHPR1301MB2096.namprd13.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1;
received-spf: None (protection.outlook.com: futurewei.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-antispam-messagedata: zUN9Kz9s3+cWeU/3EwrsOhLqFs49zHz/KI4Y0K0QBUWyLoRFPek5VCiwNN901o//WkDccQ51WCeLgoelgmKJuu61uCmaccIMQ4vziv93NapP5J8BRCY08rU8pVD5bF1ApLdbkWzG/E8zzX/jo2XMOFwBEHg4V6/48mYYw6/Ha1YKYhPSEr4WP+aCDyvRdE4QFLg1AJDfjoHRSh0o0uX8dg==
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: Futurewei.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e6eeb19e-985d-4166-6c5d-08d7c9cb8e6e
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Mar 2020 17:00:39.6192 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 0fee8ff2-a3b2-4018-9c75-3a1d5591fedc
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 4thfjWlApjXGbopjXUsJv6ahNwIaEOBD7g/mmt13V0JU1k4czjLnGnFYoP1JtrycbtjZSrUy3/SkT239b0G8WQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1301MB2125
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/V2OASkmXI78K4OaY2JHmsY2O6Cw>
Subject: Re: [DNSOP] DNS for Cloud Resources in draft-ietf-rtgwg-net2cloud-problem-statement-08
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Mar 2020 17:00:48 -0000

Scott, 

Thank you very much for the suggestion. Have changed the text per your suggestion. Will upload the new version when the IETF submission opens up next Monday. 

Linda

-----Original Message-----
From: Hollenbeck, Scott <shollenbeck@verisign.com> 
Sent: Wednesday, March 11, 2020 1:19 PM
To: Linda Dunbar <linda.dunbar@futurewei.com>
Cc: dnsop@ietf.org
Subject: DNS for Cloud Resources in draft-ietf-rtgwg-net2cloud-problem-statement-08

(Sorry, this is a late response to a review request original sent to the dnsop list on 11 February)

Section 3.4 (DNS for Cloud Resources) includes these sentences:

"Globally unique names do prevent any possibility of collision at the present or in the future and they make DNSSEC trust manageable. It's not as if there is or even could be some sort of shortage in available names that can be used, especially when subdomains and the ability to delegate administrative boundaries are considered."

Could we make the last sentence stronger, perhaps with a statement like this from the US CERT WPAD Name Collision Vulnerability alert dated May 23, 2016?

"Globally unique names do prevent any possibility of collision at the present or in the future and they make DNSSEC trust manageable. Consider using a registered and fully qualified domain name (FQDN) from global DNS as the root for enterprise and other internal namespaces."

https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.us-cert.gov%2Fncas%2Falerts%2FTA16-144A&amp;data=02%7C01%7Clinda.dunbar%40futurewei.com%7Cc4a7c2f2e85741d5b8a308d7c5e8eef1%7C0fee8ff2a3b240189c753a1d5591fedc%7C1%7C1%7C637195476559397274&amp;sdata=vBnDcnkZ8Zsk7MT610GQOsRQVt7G%2BLscbvwiDWXX%2Fvc%3D&amp;reserved=0

The alert actually says "other internal namespace", but I think that's a typo.

Scott

v2.23.0 | Report a Bug | By Email