Re: [DNSOP] Publishing Information for Entities Identified by Domain Names

Martin Hoffmann <martin@opennetlabs.com> Mon, 27 January 2020 10:20 UTC

Return-Path: <martin@opennetlabs.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D095120144 for <dnsop@ietfa.amsl.com>; Mon, 27 Jan 2020 02:20:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6Dj90U5_7WVl for <dnsop@ietfa.amsl.com>; Mon, 27 Jan 2020 02:20:53 -0800 (PST)
Received: from dicht.nlnetlabs.nl (dicht.nlnetlabs.nl [IPv6:2a04:b900::1:0:0:10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 591D012013F for <dnsop@ietf.org>; Mon, 27 Jan 2020 02:20:53 -0800 (PST)
Received: from glaurung.nlnetlabs.nl (unknown [IPv6:2a04:b904::a2c5:89ff:feb5:e311]) by dicht.nlnetlabs.nl (Postfix) with ESMTPSA id 19DB523D50; Mon, 27 Jan 2020 11:20:51 +0100 (CET)
Authentication-Results: dicht.nlnetlabs.nl; dmarc=none (p=none dis=none) header.from=opennetlabs.com
Authentication-Results: dicht.nlnetlabs.nl; spf=none smtp.mailfrom=martin@opennetlabs.com
Date: Mon, 27 Jan 2020 11:20:50 +0100
From: Martin Hoffmann <martin@opennetlabs.com>
To: Olli Vanhoja <olli.vanhoja@gmail.com>
Cc: dnsop <dnsop@ietf.org>
Message-ID: <20200127112050.60bf08a0@glaurung.nlnetlabs.nl>
In-Reply-To: <CAG8jCEwsPBmT3jcf7-uYyh0id969n8Jjwy4qvXy-vx_m8YkJ-A@mail.gmail.com>
References: <20200122151155.65e52c77@glaurung.nlnetlabs.nl> <CAG8jCEwsPBmT3jcf7-uYyh0id969n8Jjwy4qvXy-vx_m8YkJ-A@mail.gmail.com>
Organization: Open Netlabs
X-Mailer: Claws Mail 3.17.4 (GTK+ 2.24.32; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/N5rOe0vgWNahD8hMvMwng2sqeiY>
Subject: Re: [DNSOP] Publishing Information for Entities Identified by Domain Names
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Jan 2020 10:20:54 -0000

Olli Vanhoja wrote:
> On Wed, Jan 22, 2020 at 3:12 PM Martin Hoffmann
> <martin@opennetlabs.com> wrote:
> > | Abstract:
> > |    This memo describes a mechanism to publish information related to an
> > |    entity identified through a domain name via the Domain Name System
> > |    (DNS).  In particular, this mechanism allows publishing the location
> > |    of topical documents describing the entity and relationships with
> > |    other entities.  An example application is the publishing of
> > |    additional requirements for PKI certification authorities. 
> 
> I'm not sure whether I understand the reason for using DNS. What
> prevents you from using HTTP and a path?

Using the URI both as an identifier and an information locator makes it
difficult to use an identifier for multiple purposes. It can be done, but
requires more steps and whereas prefixing it with a topic specifier and
using existing DNS records is fairly straightforward and (at least in my
mind) clean. It also allows publication of documents independently of the
owner of the identifier, even use different publication providers for
different topics.

> Linking could be HTTP redirect?

Yes, but then you can’t publish a document anymore.

Kind regards,
Martin