Re: [DNSOP] I-D Action: draft-ietf-dnsop-dns-zone-digest-02.txt

"Wessels, Duane" <dwessels@verisign.com> Mon, 18 November 2019 09:29 UTC

Return-Path: <dwessels@verisign.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28AC51208A9 for <dnsop@ietfa.amsl.com>; Mon, 18 Nov 2019 01:29:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RpqzMZhkIUuh for <dnsop@ietfa.amsl.com>; Mon, 18 Nov 2019 01:29:08 -0800 (PST)
Received: from mail5.verisign.com (mail5.verisign.com [69.58.187.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DEBF12086D for <dnsop@ietf.org>; Mon, 18 Nov 2019 01:29:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=8083; q=dns/txt; s=VRSN; t=1574069349; h=from:to:cc:date:message-id:references:in-reply-to: mime-version:subject; bh=Qepj0LB5j/+oB9vO8YTfRVKmbw6dVW5nWOn+q8MtRCU=; b=ApmW4c+oko9RSEFNOZcuR8UBnbNhnr9GngDiqpTD0boDntLgUWgKgowX GXnv5mOQEFWempc3mbix3vVVb1HihyM4qrfxk4fLJ8XjMguosg+y/95Ij PWN6RGh0ZImDpTUyaxxpvefkWqcyAqAjYd9Ndyjoi1RhYsy75xIilpVwk FMa1Pbk9wgkALxinxkoPLpevQUJx9Ah3sWxjYU0/UeQCeHEEXKm9tYMnL wkMKqiUrnKPD6Q/FhCrtN80TJEiYD/o/OaUb1dLPm7THi22MVtNPCBZpL 3gT2S4I0ywSohadYOgwrF1KMyM+08PtJY9hp7exgP87FhOQT7YS+5BtkN Q==;
IronPort-SDR: muU44cExEDPrVaqswO2xCfTOlHIcA6mW76CcCt7KFxGNEG8Z49Xjo55nO6Qa+isJUzjOzh7dQU kKyksCCy1ljRhAbL28PhPw+OiW9Q33RXPby2vbgTrA8CmnQTqz3YgeVeU6+B+1gQU8/DD+TAk4 70KmsUeuQ0oH8z72z2N5Kl8zRG8OkgTvcQ3RbyfI1KUjK95m/VoMP02vlC7e7qj7IsKTq2La34 MzOYE9GiM7pmxjbEGsAn+/XlZDn30Hv3ZsRx2LbnPaRITlBGg2Csy0/KNoZl51+b84wjpFfkz7 zes=
X-IronPort-AV: E=Sophos;i="5.68,319,1569297600"; d="p7s'?scan'208";a="70706"
IronPort-PHdr: 9a23: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
X-IPAS-Result: A2FYAACVY9Jd/zCZrQplGgEBAQEBAQEBAQMBAQEBEQEBAQICAQEBAYF+gwwrgQYKhCCQciWDapcDPAkBAQEBAQEBAQEDBAEjDAEBAoQ+AoJIOBMCAwsBAQEEAQEBAQEFAwEBAQKGIAyCOyIYUjswAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQESAj9VNQEBAQECASNWBQsCAQgYKgICAjAlAgQOBQ6DFAGCVxEerWd1gTKFToRdCgaBNoFTg0iHEoFBPoE4DBOCTD6CYgIDgV0YgnkygiwErikDB4Iqg06CNIEYjlCaEZcAjjSDHAIEAgQFAhWBaYF7cBVlAYJBPhIRFJElGIhkhT90jVGBDwEB
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1779.2; Mon, 18 Nov 2019 04:29:09 -0500
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d]) by BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d%5]) with mapi id 15.01.1779.002; Mon, 18 Nov 2019 04:29:09 -0500
From: "Wessels, Duane" <dwessels@verisign.com>
To: Vladimír Čunát <vladimir.cunat+ietf@nic.cz>
CC: "dnsop@ietf.org" <dnsop@ietf.org>
Thread-Topic: [EXTERNAL] [DNSOP] I-D Action: draft-ietf-dnsop-dns-zone-digest-02.txt
Thread-Index: AQHVnfKhqwvzxuuGskeh6s7UQDy5eg==
Date: Mon, 18 Nov 2019 09:29:09 +0000
Message-ID: <C3DC6802-93E3-4384-9E6B-CE5C35290B00@verisign.com>
References: <157229744669.16151.1847387329475971355@ietfa.amsl.com> <C9B7ADD2-5D9B-4A2A-BB5E-6335B36CB96F@verisign.com> <efcffa02-fda5-a939-473a-e4b6231a60bf@nic.cz>
In-Reply-To: <efcffa02-fda5-a939-473a-e4b6231a60bf@nic.cz>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3445.9.1)
x-originating-ip: [10.170.148.18]
Content-Type: multipart/signed; boundary="Apple-Mail=_8900D7F4-BFAB-4113-884C-9B80F2E6506E"; protocol="application/pkcs7-signature"; micalg="sha1"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/NrApm6SQlbV6PVPJAuiEw9AzQUs>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-dns-zone-digest-02.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 09:29:10 -0000


> On Nov 7, 2019, at 7:56 PM, Vladimír Čunát <vladimir.cunat+ietf@nic.cz> wrote:
> 
> Hello!
> 
> On 10/28/19 10:32 PM, Wessels, Duane wrote:
>> The one defined hash algorithm SHA384 has been renamed to SHA384-STABLE to reflect that it designed for use on stable (or small) zones where it is not burdensome to recalculate the digest over the entire zone data each time.
> 
> Tiny nitpick: calling it "SHA384-STABLE" might be a tiny bit confusing
> (to me), as I've seen that word refer to some particular hashing
> approaches/properties.  Actually some of the algorithms that efficiently
> recompute after small changes in large zones... I'd even tend to call
> those digests (more) "stable"/"steady" intuitively, but that might be
> personal :-)  I certainly don't have a strong opinion on the naming and
> don't want to bike-shed, but I could imagine calling it "simple" or
> "flat" or something along those lines.
> 
> [example] https://en.wikipedia.org/wiki/Stable_hashing
> 
> --Vladimir


Hi Vladimir,

Thanks for the feedback!  I guess we settled on stable as being sort of opposite to dynamic, but I agree it's not all that great.  I would be okay with "simple" or "flat" as well.

DW