IETF Logo Mail Archive

Re: [DNSOP] new ANAME draft: draft-hunt-dnsop-aname-00.txt

"John Levine" <johnl@taugh.com> Fri, 14 April 2017 20:03 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8C151289B5 for <dnsop@ietfa.amsl.com>; Fri, 14 Apr 2017 13:03:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.12
X-Spam-Level:
X-Spam-Status: No, score=-1.12 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_NEUTRAL=0.779, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kpOwFrr1n5gu for <dnsop@ietfa.amsl.com>; Fri, 14 Apr 2017 13:03:39 -0700 (PDT)
Received: from miucha.iecc.com (www.iecc.com [IPv6:2001:470:1f07:1126::4945:4343]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7AE161277BB for <dnsop@ietf.org>; Fri, 14 Apr 2017 13:03:39 -0700 (PDT)
Received: (qmail 52442 invoked from network); 14 Apr 2017 20:03:38 -0000
Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 14 Apr 2017 20:03:38 -0000
Date: Fri, 14 Apr 2017 20:03:16 -0000
Message-ID: <20170414200316.86192.qmail@ary.lan>
From: John Levine <johnl@taugh.com>
To: dnsop@ietf.org
Cc: peter.van.dijk@powerdns.com
In-Reply-To: <05429B5D-904B-4913-9843-654C917DEA27@powerdns.com>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/NpkHkCHtqzGO_Yr7AW2NFVHQ8nM>
Subject: Re: [DNSOP] new ANAME draft: draft-hunt-dnsop-aname-00.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 20:03:41 -0000

In article <05429B5D-904B-4913-9843-654C917DEA27@powerdns.com> you write:
>> Wouldn't it be safer to put the ANAME in the additional section?
>
>My thinking was that given that DNAME got away with being in ANSWER, so 
>could we.

Seems to me that it belongs in the answer section, since for aname-aware
reasolvers the aname is the answer.

>> Do we care about SSHFP?
>
>I understand the question but I’m uncomfortable extending ANAME beyond 
>address types. I will put it on the list of things that need more thought.

Type bitmaps like the ones in NSEC wouldn't be hard to implement.  Add
some sanity rules saying that type bits for DNSSEC types and the like
are ignored, and it's an error to include any types also present at
the same name.

R's,
John

v2.23.0 | Report a Bug | By Email