Re: [DNSOP] draft-lewis-domain-names-00.txt

Alec Muffett <alecm@fb.com> Fri, 18 September 2015 14:17 UTC

Return-Path: <prvs=6703160180=alecm@fb.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC41B1B2C9A for <dnsop@ietfa.amsl.com>; Fri, 18 Sep 2015 07:17:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.332
X-Spam-Level:
X-Spam-Status: No, score=-1.332 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_MISMATCH_NET=0.611, HOST_MISMATCH_COM=0.311, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NEUTRAL=0.112, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yL4f3mFZ3va0 for <dnsop@ietfa.amsl.com>; Fri, 18 Sep 2015 07:17:24 -0700 (PDT)
Received: from m0001303.ppops.net (mx0b-00082601.pphosted.com [67.231.153.30]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46C371B2C7D for <dnsop@ietf.org>; Fri, 18 Sep 2015 07:17:24 -0700 (PDT)
Received: from pps.filterd (m0001303 [127.0.0.1]) by m0001303.ppops.net (8.14.5/8.14.5) with SMTP id t8IEGR3w016008; Fri, 18 Sep 2015 07:17:02 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fb.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=facebook; bh=ShZDcuYCMcLjdMy6oqDimJMpA2QG0sTZZKuZmQyJ458=; b=KH0JKxMs6fu0iyiwUKAXXr/MtJMV+Sc8aZv4qAUbj7rI7u00q+wIIKFJ/GbRIr2NtAWM QUcGAriXtLQh/r3RlNnYHhOGWM6Sbu/RgctoPd0aBBRh3ZBxy+t2xuilVhVrYYh07ex2 V3nVaGqiZ+JkOMdUfKRs6BCfcnr68IBfXO0=
Received: from mail.thefacebook.com ([199.201.64.23]) by m0001303.ppops.net with ESMTP id 1x0m2gg1e2-2 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Fri, 18 Sep 2015 07:17:01 -0700
Received: from PRN-MBX02-4.TheFacebook.com ([169.254.2.38]) by PRN-CHUB14.TheFacebook.com ([fe80::5977:3d0b:700b:8bb%12]) with mapi id 14.03.0248.002; Fri, 18 Sep 2015 07:16:16 -0700
From: Alec Muffett <alecm@fb.com>
To: Edward Lewis <edward.lewis@icann.org>
Thread-Topic: [DNSOP] draft-lewis-domain-names-00.txt
Thread-Index: AQHQ8YNHdEo//bQ/vEaybYlWidLMPZ5CuraAgAAKsgD//7/TAIAARj4A
Date: Fri, 18 Sep 2015 14:16:16 +0000
Message-ID: <E97EF903-07A5-4356-BE68-4C26EE76CC1F@fb.com>
References: <D2209363.F235%edward.lewis@icann.org> <CAKr6gn1aM0=Mi3343aaXKc=WtqGnJqoQm64+r4LDKzT0MyAF7A@mail.gmail.com> <14957733-EB45-45ED-9B5C-55B0943CDACD@fb.com> <D22190A3.F274%edward.lewis@icann.org>
In-Reply-To: <D22190A3.F274%edward.lewis@icann.org>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [192.168.52.123]
Content-Type: multipart/signed; boundary="Apple-Mail=_DD0A276A-F127-473A-895E-701058007174"; protocol="application/pgp-signature"; micalg="pgp-sha512"
MIME-Version: 1.0
X-Proofpoint-Spam-Reason: safe
X-FB-Internal: Safe
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33, 0.0.0000 definitions=2015-09-18_07:2015-09-18,2015-09-18,1970-01-01 signatures=0
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/OkFn-vC0kVILStqpLmiu757PhOA>
Cc: dnsop <dnsop@ietf.org>
Subject: Re: [DNSOP] draft-lewis-domain-names-00.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Sep 2015 14:17:26 -0000

>> So it's IMO fine to say ".onion addresses are case-insensitive and
>> will comply with existing DNS limitations for label lengths (63) and
>> maximum fqdn lengths (253ish)".
>> Which contradicts draft-lewis-domain-names-00
> 
> 
> So - and not to be pointed - but in your email I reference, should I ignore that for the sake of this document?  I mean what the message says seems to contradict what you are quoting from Mathewson - which is fine - but this is something unclear to me.


Yes, you should ignore that text.

Nick is the engineer at Tor who implements the relevant code.

In the following, he provides the following undertaking:

https://lists.torproject.org/pipermail/tor-dev/2015-August/009275.html <https://lists.torproject.org/pipermail/tor-dev/2015-August/009275.html>

> The examples in Proposal 224 are a mere 53 characters long leaving 10 to
> play with for padding-hyphens and possibly checksum characters.
>
> Nick: Is this likely to need to change? Or might there be a need to encode >
> 315 bits / 63 chars total?

I don't anticipate this changing.

If there were ever a need to encode more than that number of bits,
we'd add an extra label.

So, .onion addresses will stay within DNS bounds.  :-)

    - alec