Re: [DNSOP] New Version Notification - draft-ietf-dnsop-dns-catalog-zones-09.txt

Willem Toorop <willem@nlnetlabs.nl> Thu, 09 February 2023 14:16 UTC

Return-Path: <willem@nlnetlabs.nl>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABB6BC16B5C8 for <dnsop@ietfa.amsl.com>; Thu, 9 Feb 2023 06:16:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nlnetlabs.nl
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mEfYA6i_sOCk for <dnsop@ietfa.amsl.com>; Thu, 9 Feb 2023 06:16:45 -0800 (PST)
Received: from mail-io1-xd30.google.com (mail-io1-xd30.google.com [IPv6:2607:f8b0:4864:20::d30]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7D79C16B5C3 for <dnsop@ietf.org>; Thu, 9 Feb 2023 06:16:45 -0800 (PST)
Received: by mail-io1-xd30.google.com with SMTP id o1so705053ioo.10 for <dnsop@ietf.org>; Thu, 09 Feb 2023 06:16:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nlnetlabs.nl; s=google; h=content-transfer-encoding:in-reply-to:subject:from:references:to :content-language:user-agent:mime-version:date:message-id:from:to:cc :subject:date:message-id:reply-to; bh=J3POtzPrF+nYwd7WWGe8q/D3qALNnvi2Klh5SPkcmoY=; b=PLdXHZhSOxQdobx5smXSenMDOgKYCwQuBLiVp2OL5+73nvrMO+qxJBopLnETDZN0rp LOh5Ofil92pwrl+3JRU1b649rmskgZuRdOGfbCMXngSDFCQF3AKqKqDzoyTflIb6OTTc +v/fcNTbEjzPyu0jDL+kyk1Q4MBLvf6PmOAZuGM1JGyvhStMqeqRX9ILwVCwtX6jGv67 cyeKAHWrr6mklki+cNkX+qx42us1+BauOYuNlm9k9rR6Lerm/+aeozSylhKmpYqCew1O TD9jhEkFXEnQUIX3cRSkTPMG+RjOug87BcGaKdwWMESZWgZm81HEbaUJUWNZxu5bDgFo 2f9A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:subject:from:references:to :content-language:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=J3POtzPrF+nYwd7WWGe8q/D3qALNnvi2Klh5SPkcmoY=; b=uNy1NjOMsslDi3MJNKcXTOqMPWRJIWumC6CjWKBZYJn/NXCXNZmdQzMPqroEZxret8 jTWQgTrpGjSH58D0B2p0yS5HyQ6Y4txRVKvZsIIFCphV5NzfwTgZjBeG8HSr+bW/VP9B XMeNVIxI1zEPiQcuDQjecL+eRM1JUQCJeXbMoEstWMTljvPj46V2to6Oqp1KoCVixjlJ KbMnRs/lBHWt6A3QldlS7ap95L8LA1EuDV1Lajn/JiWCYdw3NycjtgeHI2E1m3dgknIo RDTROEwlmqlWTB/sLmnhrWcW4k/jGfCvacybuNLalW8Ynu8+pJGioia67JtdKL9Xq1uv Ag8w==
X-Gm-Message-State: AO0yUKW23KSGQ8x4wjeLTpk2x2tWkOJZRt9dmTqZWdokgomrY30FawLu b576sJMaamFLHFVBMF2zwn+AgERRW0BymTGg
X-Google-Smtp-Source: AK7set+Xaxj7g8Z5Wo2w8wT/Mt4eLwV+XiZqHw6f7vh/re0OPFHC+rKycA24hi4hBFOI2zH5Zir84Q==
X-Received: by 2002:a05:6602:3141:b0:71c:9858:1792 with SMTP id m1-20020a056602314100b0071c98581792mr8728096ioy.13.1675952204366; Thu, 09 Feb 2023 06:16:44 -0800 (PST)
Received: from ?IPV6:2a04:b900::7d0? ([2a04:b900::7d0]) by smtp.gmail.com with ESMTPSA id h22-20020a5d80d6000000b0071d93cda853sm441158ior.42.2023.02.09.06.16.43 for <dnsop@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 09 Feb 2023 06:16:43 -0800 (PST)
Message-ID: <50ede02f-b45e-6982-ac2c-4dd27fa355fe@nlnetlabs.nl>
Date: Thu, 09 Feb 2023 15:16:42 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.7.1
Content-Language: en-US
To: dnsop@ietf.org
References: <4F7C6733-7F82-4BF7-9068-5733B3E50D87@nohats.ca>
From: Willem Toorop <willem@nlnetlabs.nl>
In-Reply-To: <4F7C6733-7F82-4BF7-9068-5733B3E50D87@nohats.ca>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/PFLxT3cS5KdYXs9NMzgWzupIE0Q>
Subject: Re: [DNSOP] New Version Notification - draft-ietf-dnsop-dns-catalog-zones-09.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Feb 2023 14:16:50 -0000

Op 09-02-2023 om 14:46 schreef Paul Wouters:
> On Feb 9, 2023, at 06:33, Willem Toorop <willem@nlnetlabs.nl> wrote:
>> Op 07-02-2023 om 16:45 schreef Paul Wouters:> I find the valid use of the name "invalid" to be pretty horrible. An
>>> engineer looking at a catalog might quickly believe
>>> the invalid is a bug where it should have shown a real domain. Why not _catalog.arpa or something ?
>>
>> We, the co-authors, actually prefer producers to use a domain they own (because no chance on collisions with consumers from multiple producers). I've done a commit to express that more clearly. The new text is:
>>
>>    ``It is RECOMMENDED to use a domain name owned by the catalog producer if possible, or if that is not possible use a name under a suitable name such as "invalid." [RFC6761].''
> 
> A name under a suitable name such as invalid would then be “example.com.invalid” and not as it has now just “invalid” ?

Do you mean in the Catalog Zone Example appendix ( 
https://www.ietf.org/archive/id/draft-ietf-dnsop-dns-catalog-zones-09.html#appendix-A 
) ?

The name used there is "catalog.invalid.", not just "invalid.".
You prefer "example.com.invalid" over "catalog.invalid"?

> Or it could use “_catalog.example.com”  ?

Yes, if we add a sentence that the fictional organization producing this 
catalog is "example.com", then we could use that too yes.