Re: [DNSOP] draft-ietf-dnsop-extended-error code options

Geoff Huston <gih@apnic.net> Mon, 13 November 2017 21:38 UTC

Return-Path: <gih@apnic.net>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69195126CC7 for <dnsop@ietfa.amsl.com>; Mon, 13 Nov 2017 13:38:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=apnic.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6LVmT2u40cRZ for <dnsop@ietfa.amsl.com>; Mon, 13 Nov 2017 13:38:06 -0800 (PST)
Received: from APC01-SG2-obe.outbound.protection.outlook.com (mail-sg2apc01on0060.outbound.protection.outlook.com [104.47.125.60]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5035A124319 for <dnsop@ietf.org>; Mon, 13 Nov 2017 13:38:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apnic.onmicrosoft.com; s=selector1-apnic-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=3V+mVWnRbVrb6NZ5J7oYTC5H+1q5SeCsQ5NrUuIBpek=; b=lpnVc3xdApfp2+BZyY4nhLwFvupl3cxEJD+dj7cw2gPuiEe//CrLoKNn91q7mIvzGUnPYXpbYA1vpb20fTJbIa0oql8WNhMWK5wB2G0YxtrrZsN30x13bif8l0wUb2PQB0Vo+sBhNZFg7WaXBcEFy/kLptEmLBwiPh/kiusTbmg=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=gih@apnic.net;
Received: from [IPv6:2001:67c:1232:144:a13b:1cab:5bb7:fc74] (2001:67c:1232:144:a13b:1cab:5bb7:fc74) by SIXPR04MB0700.apcprd04.prod.outlook.com (2a01:111:e400:51ee::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.218.12; Mon, 13 Nov 2017 21:38:02 +0000
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Geoff Huston <gih@apnic.net>
In-Reply-To: <3FFE9D39-DD16-4863-9F9B-46D585F90BF1@hopcount.ca>
Date: Tue, 14 Nov 2017 08:37:55 +1100
Cc: tjw ietf <tjw.ietf@gmail.com>, dnsop <dnsop@ietf.org>, Wes Hardaker <wjhns1@hardakers.net>
Content-Transfer-Encoding: quoted-printable
Message-Id: <9EAE2E1F-CE2E-4F9F-92B2-1FE2A6023492@apnic.net>
References: <yblpo9md8fk.fsf@wu.hardakers.net> <CADyWQ+G-e+zqGkFK7vPQdXBDRvyv-Gxw75N1z+A6L8ULR=+izQ@mail.gmail.com> <26DB1BD1-A877-482A-83B3-7A7F673AAB4A@apnic.net> <3FFE9D39-DD16-4863-9F9B-46D585F90BF1@hopcount.ca>
To: Joe Abley <jabley@hopcount.ca>
X-Mailer: Apple Mail (2.3273)
X-Originating-IP: [2001:67c:1232:144:a13b:1cab:5bb7:fc74]
X-ClientProxiedBy: SG2PR01CA0106.apcprd01.prod.exchangelabs.com (2603:1096:3:15::32) To SIXPR04MB0700.apcprd04.prod.outlook.com (2a01:111:e400:51ee::22)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: f9391aa3-f719-4ab9-2bae-08d52aded16c
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(4534020)(4602075)(4627115)(201703031133081)(201702281549075)(2017052603258); SRVR:SIXPR04MB0700;
X-Microsoft-Exchange-Diagnostics: 1; SIXPR04MB0700; 3:rgXEhowKsciASXy0Aady+dJQR2JF608jFBWojtTjHCK9IdIl3/81ooT+FB8niuTIrmPLNhaZk0VDL/cq/YH/Dsw1xHA1GGxhYSkzh3awkt6E83D8cf/LdkBgzprTJhupglrfV7Kw2q8wro1n6XvrZNPIf5VFdKk4M87TGvVpmtVr0JivzsymVCd5DARoN3iV47ly93GRkDuzaahLjrrseQ0kAfTtru3nw6qTsVARLDOOcn+Y52w9lcOVqBvh0fXX; 25:cORBhAaUlczTB+Lug3vtUu1zzziIC5vkQOZSaO1/WY7FdcBBhO/5W9caI4D8bFqKDb8Uud4s0ZfNNZdC4/0+VeEld8ZHfLo63cIWs/ICoXo1WzvSGH3Hi/9aC61S3XACu55wVy2xUwqiHvymqyyJQG6L+5HDJVIbwSJKe96zHMTTb2Vpbf73HGV8S5Q2hQoDCy1nx35eJ20zT/8OyXdb8K8fHdS9uqjG89I4sdXn2++Z052RBj40Dzi3Iy78UA5La9fSXGz7SDluRXYpUqd6KqSo0MaFiVMqoGYUL2L7zlPtEP6MF3fBbLF7FbRLDdJp7AJNTS7RbM51zzAOk4TUew==; 31:wVnOPzN3ogAd8opzQjesmCeWwL3B+23zNAysY7ysb54i0X7AeH517uO8JuBApSRYHJgrMukhCuKa/dv9qW+N2w3k2Xt1i0DmqQ1pWyifPr4OITyY0EPTa4rF3UD7hG1warjDL3ukPUIdfgGlFdhtuCpUitBh08m9Z36erkf4onYVIkeFZ6DlKyBlroySIpiHK/q/1rZndl3tcdVJolBG258u880CiHDWBYlFv9G+HGo=
X-MS-TrafficTypeDiagnostic: SIXPR04MB0700:
X-Microsoft-Antispam-PRVS: <SIXPR04MB0700F4AB9F8C3C7CCCBC79EEB82B0@SIXPR04MB0700.apcprd04.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(10201501046)(3231022)(3002001)(93006095)(93001095)(100000703101)(100105400095)(6041248)(20161123564025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123555025)(20161123562025)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:SIXPR04MB0700; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:SIXPR04MB0700;
X-Microsoft-Exchange-Diagnostics: 1; SIXPR04MB0700; 4:4+fbYlLdEjX8sUa4sg5hMEuKf7tEObA8ziFLx/s7uXVQEn+FwHJFOjlyIFkWuZr5HM67/gackAKFwOzJQP9GuxVyET+ejnDNFR6tqoIJ//pLVJQ80rwNZOATk6hTPPvCpIIXp2ceLkW213Y2wXAv6ruUeqBfIujYmptMZ7MinMAgxhHhXm2/yL6JUV4gMEox+Qp7rMkQN6FGYJn4LvM6wqKXg9Ae/wVrCkZTrgYbK/1Zoliu3G23+iSgQyG6/tQiT2+HiwHtJLoortDd3qvxrg==
X-Forefront-PRVS: 0490BBA1F0
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(6009001)(376002)(346002)(39830400002)(199003)(189002)(24454002)(82746002)(86362001)(478600001)(53936002)(6246003)(6486002)(50226002)(68736007)(54906003)(53546010)(316002)(2906002)(83716003)(105586002)(8936002)(81156014)(8746002)(23676003)(8676002)(81166006)(93886005)(6666003)(5660300001)(189998001)(6916009)(39060400002)(106356001)(2950100002)(4326008)(97736004)(47776003)(36756003)(57306001)(305945005)(33656002)(101416001)(230783001)(25786009)(50466002)(76176999)(6116002)(1706002)(50986999)(7736002)(229853002)(42262002); DIR:OUT; SFP:1101; SCL:1; SRVR:SIXPR04MB0700; H:[IPv6:2001:67c:1232:144:a13b:1cab:5bb7:fc74]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
Received-SPF: None (protection.outlook.com: apnic.net does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;SIXPR04MB0700;23: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
X-Microsoft-Exchange-Diagnostics: 1; SIXPR04MB0700; 6:7xyqQoAsp7mKwCrnV2000t4sM/3qdTyUoKecKMXX0DXVYstapfhEF66BLqgDn4CirUi8Pk3OqYF75V5fa7bTtd+tVLia7YrgIlzpj3J+qcQiM0hQD5O2jH9eeHLrceiD4Rz9+X4yYSQLy0A3LbcBAT5dwMZACr7ROx4rbbBSfD8GLk0SMkr1luhSLDVD2lD6j3S9edJYukJgWmYvPxYMmqIEs8FDV30LEMvNirEMYRiLzSlsnwQYPP5+3hY27qtBEyJLgX0xGNjTwqT1npF2xExX6U//tB2f3TEpmwNkgso9xDUgqZKE6tUusQqxyExHBnmOSzDAlkwubNXy4cOYTfdO3OsR8UHALidMgeRESZk=; 5:i9OX3OYorolJUlE7WqGXGGeEAL2egl6++eP5WwuSeRUXwpG3fI9NQIkmlDZSg/fymuDZnijncajMtxJEgI018/wvSaygq7THnmYDJlJnYrdouIJf1W0tAKfRz3F6xEB2I+FVb5c6nkSog8VT5SpfffQjUsnyvBo8qSzyf8laIyU=; 24:DANIS0KwoNzkjE7yf4Gue8te8BT5ZkTP69AG/DppTMLR+jWwBBmX2FlgvrHImj8r/ictAHcpa4shWhIUqQAWVtwbK0L+7P7i55HHmiCMUpc=; 7:8lD90fAVdH/t4pnc8QaFY1u/bBQTZZom9jY1AvVFz6KK4R0DX4ffSCYW2vYZxIXVsLgvagQUPZ5X1qU+/Mw1md5o2/h/W/j6QSIbk/vlJOYzv2ZRNL8yZk5vSCtN+WcAEWhkrhjqLPk3rpdOcAD10bdjD+ayoGjKWw5tFWnJd+e81y8CNRvaChfCni3WGdhMCScumxUWaTj2MnAwiKWSoA+4f/HaqUgQ3C2IBirEB5VQOVwyJv5UOAt7fCnjPhzr
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: apnic.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Nov 2017 21:38:02.6957 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f9391aa3-f719-4ab9-2bae-08d52aded16c
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 127d8d0d-7ccf-473d-ab09-6e44ad752ded
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SIXPR04MB0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/P3qoVNB0vyqNeYZKtYf4z_tFskc>
Subject: Re: [DNSOP] draft-ietf-dnsop-extended-error code options
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Nov 2017 21:38:09 -0000

> On 14 Nov 2017, at 8:19 am, Joe Abley <jabley@hopcount.ca> wrote:
> 
> Hi Geoff,
> 
> I think the number 4 on the slide was different from the one in the mail.


I thought so too, but I wasn’t sure if it was me not paying attention in the WG meeting or not!

> 
> The option on the slide that I mentioned I liked the most was the one that didn't copy the RCODE value from the header, but in effect provided a 16/32/whatever-bit sub-code for whatever the RCODE happened to be.


and that makes sense to me, considering my perspective of the risk associated with duplication of protocol field values

> 
> So, for each permissible value of the RCODE field, this new field would provide additional information that was relevant to that value.
> 
> Compared to the other options presented, this avoids having to specify behaviour for all the unhelpful corner cases of RCODE in message header doesn't match the copy in the new field, new field value (e.g. "validation failed" or something) doesn't make sense for this particular RCODE (e.g. "NOERROR"), etc.
> 

thanks Joe,

   Geoff